Behold, the greatest thinkpad propaganda you will ever see

Testing out live terminal session replays on my blog. Same "easy viewing" of a proof of concept as a gif/video except: 1. Super easy to record `asciinema rec file.cast` 2. Super easy to host on my site 3. The best part.... you can copy/paste the text from the terminal replay 🤯

I'm always a little happy when I have to build something from source and see it's written in rust. Cargo is so nice :)

Yeah im just gonna go to bed after that one

lofi hip hop devices to relax/study to

No skips

She keeps the creepers away

I understand now

Cat not enjoying the new record player

They're on to us

TIL: there doesn't seem to be a way to read a raw file from a remote repository using pure git commands without first cloning the repo 🤨 ("Well acktchually 😐☝️" comments welcome)

When looking for obscure issues I always end up with tons files like: poc_final_final2.sh I don't always have time to organize things without the potential of losing my train of thought so I've been trying to find an easy solution. This is my most recent attempt:

Look how beautiful this code-block is on this person's blog ertt.ca/nix/shell-sc...

don't be like me and try listening to the nix evangelists

Anyone successfully using both markdown and silverbullet? Interested in hearing about your workflows for either but specially interested in silverbullet

Happy Monday, all! ICYMI, there's a new version of my comprehensive guide to DevOps-based homelabbing available!

Taggart@taggart-tech.com · last yr.

Hello, friends! I'm thrilled to announce that The Homelab Almanac, v3.0 has officially launched! There is a **ton** of new stuff in this version, including: - Proper DNS - PKI - Automatic signed certificates - New secrets management - Proxmox clustering - Cloud integration

hi, to anyone impacted at Crowdstrike. please feel free to reach out if I can help you land a role at Google or any other shop. happy to do resume reviews, coaching, or referrals. we're always looking for skilled dfir, CTI, SecOps, and many other disciplines! happy to help if I can.

POV: You're a Linux admin working at TikTok

Kubernoodles

POV: Me (allegedly) gaining write access to the internal container registry and setting all container images to mine crypto

I learned so much writing Gubble. Can't wait to release it this week! Any ideas what it could be?

Low Orbit Security@loworbitsec.bsky.social · 2y ago

Gubble is coming out this week. Here is a sneak peek of some tools I created to help test it. What could this be for 🤔

Pass is a really cool CLI and GPG based password manager that follows the Unix Philosophy. Do one thing and do it well. Project: passwordstore.org Setup Guide: ryan.himmelwright.net/post/setting...

As a zoomer, this is what my filesystem looks like

Every week I post a summary of what security ideas I've been thinking about. This week it's mostly ideas from myself discussing the threats and opportunities of AI as well as why I think we're seeing a shift away from the cloud. loworbitsecurity.com/radar/radar7/

All this time put into learning cyber security and I can't stop my girlfriend from downloading a sketchy rewrite of moshi monsters off github

a close up of a smiley face with a hand behind it

ALT: a close up of a smiley face with a hand behind it

media.tenor.com

Some invaluable Linux tools I've used this week and some of my personal notes on how to use them in the future:

"Although Cleo published an update and advisory for CVE-2024-50623—which allows unauthenticated remote code execution—Huntress security researchers have recreated the proof of concept and learned the patch does not mitigate the software flaw." www.huntress.com/blog/threat-...

I'm releasing this a day earlier than normal because I'm quite proud of this: This week's topics include: Downstream Impacts of the Telco Breaches, 2024 Insider Threat Report with A Stern Talking To About Branding, and Chasing The Ghost In The Wire loworbitsecurity.com/radar/radar6/

NPM and PyPi "firewall" for preventing the installation of known malicious packages. A very cool idea. github.com/DataDog/supp...

GitHub - DataDog/supply-chain-firewall: A tool for preventing the installation of malicious PyPI and npm packages :fire:

A tool for preventing the installation of malicious PyPI and npm packages :fire: - DataDog/supply-chain-firewall

github.com

I'm taking netwars for my masters which came with an OVA file. I was messing around with Incus recently so I took some quick notes on using Incus to run a .OVA File grahamhelton.com/blog/incusova/