Deploying Hermes Agent securely: a practical hardening guide
A threat-model-first guide to installing, isolating, exposing, and operating Hermes Agent without mistaking guardrails for security boundaries.
Corrupted.io
A tech log
Latest posts
Using Hermes Agent for Security Workflows
Using Hermes Agent for Security Workflows I have been using Hermes Agent for security work – triage pipelines, code-review gates, threat-intel summarization, compliance collection, incident response data analysis. This post is about where it fits, what it can do, and where it breaks.
RAG Poisoning: When Your “Safe” AI Eats Bad Documents
RAG Poisoning: When Your “Safe” AI Eats Bad Documents So you built a RAG pipeline. Congrats. You probably think you’re safe because the LLM “only answers from approved documents.” I have some bad news.
Inspecting ContainerNet
Inspecting ContainerNet For various reasons there may be a time that you have to answer the question “What the heck are my containers saying on the network?” The answer I found to how to answer that question was a less than satisfying “well install tcpdump everywhere, dump the contents to a docker volume inspect later”. That felt less than satisfying and produced a lot of work that just didnt feel…
My FreeBSD Laptop Build
My FreeBSD Laptop Build I have always liked Thinkpad hardware and when I started to do more commuting I decided I needed something that had a decent sized screen but fit well on a bus. Luckily about this time Lenovo gave me a nice gift in the Thinkpad X390. Its basically the famous X2xx series but with a 13” screen and smaller bezel. So with this laptop I figured it was time to actually put the…
Tooling the hyve
Hey all, It’s been a while here so I figured I would write up some stuff I have been playing with. This go around it is BHYVE on FreeBSD. BHYVE is a great hypervisor project that started with the idea of FreeBSD needing its own hypervisor like KVM, but if we were going to make KVM today what would we do? There are all sorts of features with it and it gets better every day but as a Sysadmin my…
Curing the insomnia, enable sleep for the X1 Carbon 6th Gen
Curing the insomnia, enable sleep for the X1 Carbon 6th Gen So I recently got a great deal on an X1 Carbon 6th generation and love it, but there were a few downsides to it. The biggest down side is recently Lenovo decided to go all in on new is better and only provides S0ix sleep states. This is an issue for operating systems that do not support S0ix sleep states yet, like FreeBSD. But never fear,…
FreeBSD on the System76 Galago Pro
FreeBSD on the System76 Galago Pro Hey all, It’s been a while since I last posted but I thought I would hammer something out here. My most recent purchase was a System76 Galago Pro. I thought, afer playing with POP! OS a bit, is there any reason I couldn’t get BSD on this thing. Turns out the answer is no, no there isnt and it works pretty decently.
PowerShell DSC and the cryptic error message!
PowerShell DSC and the cryptic error message! DSC is a great idea that is still in the process of being completely baked out in windows. As such there are still a few quirks and issues, one of them being error messages. Today I ran into one of those ever great cryptic messages Failed to get the action from server http://server/PSDSCPullServer.svc/Action(ConfigurationId='foo')/GetAction, so lets…
Bending DuckDuckGo to do your bidding.
Bending DuckDuckGo to do your bidding. It turns out while thinking ahead I decided I will at some point need to give people a way to search my blog. Not wanting to write or host an indexer myself I thought maybe I’ll turn to my favorite search engine of all time, DuckDuckGo.