🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

It's been a while since I stayed up debugging bcc garbage

Do we call every security review a pen test at this point? Has it lost all meaning? * Source review. Pentest * Cloud config review: Pentest * Penetration test: Red Team Exercise youtu.be/VVFowwrjJo4?si…

Pentesters' executive summary in 2025

Wafer lock. Annoying building a key

gVisor is such a frustrating project that's a good tech that got dumped into Googles open source abyss. This year I've spent (what feels like) hundreds of hours collecting modern ways of using it and I think sharing it only helps with the adoption of an unsupported project.

Sick! My talk "Life of a System Call: Why containers are so hard to secure" got accepted for B-Sides Buffalo! Hope to you all in western New York in June!

Slop Squatting. Exploring Supply chain with AI hallucinations. 🤮 csoonline.com/article/396130…

ChatGPT, I did not request a song... but its like you read my mind

It's Filesystem Friday so I just learned about overlay file systems. Whiteout files. When you `rm` in a Dockerfile (or some more subtle things like rename(), renameat(), truncate()) a whiteout file is created prefixed by ".wh." in the image layer. 🤔 docs.kernel.org/filesystems/ov…

. NCC Group plc you may want to respond to my emails that I'm blasting you with or DM me WRT ScoutSuite. 🫠 Does anyone still work there?

I'm still working on mine but I'll be in the last minute bucket with the rest of you. Submit!

Read the room weather channel!

My 3D printer knows when to break when I've got a lot of shit to do. It is smarter than me. The new part is in the mail but I hope it's slow because I've got angry-BPF to write.

Chicago here I come! (Well at the end of May for THOTCon and BSides312)

My kexp mug has turned into a crypto mug

Argo CD 3.0 is officially released! Go git it! This release contains tons of performance, security, and usability improvements. It distills tons of best practices into new default behavior. Don't forget to review the upgrade docs to make ready! argoproj

This actually is a pretty interesting crew to chat about secure containers

Yeah it's funny... HBO Go, Now, Max, Go Max, Max Go, HBGO, NowBO... But seriously I need all those execs making these "rebranding" choices to be in some kind of Hunger Games show for accountability.

What does one do in Pittsburgh? Looking for weird over normal recommendations