Blog of Gynvael Coldwind.
Kubernetes is now the backbone of modern infrastructure - and one of the most attractive targets for attackers. As such, I m excited to bring a hands-on workshop focusing on the security of Kubernetes to hackArcana . Here s some useful info about it: Workshop: Practical Deep Dive into Kubernetes Security Format: Live online (with instructors), exercise-based workshop Instructors: Jarosław Jedynak,…
Paged Out! was always intended as a PDF+print zine, but the "print" part turned out to be pretty elusive. We actually did an initial test print of 500 copies in 2019 for a conference I ve co-organized (Security PWNing), but that s it. Until last month that is, when we pretty much got back on track with prints — both free prints for events, and — additionally — print on demand if someone wants to…
It s the 20-year anniversary of the CONFidence conference ! And it s happening next week (2-3 June) in Kraków, so don t miss out. Furthermore, we ve shipped 500 Paged Out! #6 issues there, so – if you re fast enough – you can grab one for free there :) Enjoy CONFidence! P.S. If you don t have a ticket my code might still work: GYN10 P.P.S. Huh, time flies, doesn t it. I think the first CONFidence…
Initially I was supposed to write another article on something completely different, but then I randomly found myself digging into what CTRL+D actually does on Linux. And it turned out it does something different than I thought, so I decided to share my surprise in the form of an article posted at hackArcana . Here s the first section: Linux Terminal: CTRL+D is like pressing ENTER What I always…
With the beta launch of my company s educational platform ( hackArcana ), I finally have a place to write more about the fundamentals of security and post more educational content. The first piece I ve written for our new platform touches on the confusion around the terms "validation," "sanitization," "encoding," "escaping," and "filtering". Most readers will of course be familiar with these, but…
"Hacker", as we in the bizz know well, carries different meanings for different people, and this can cause hilarious misunderstandings. Yesterday, the Polish TV network TVN aired the second part of an ongoing documentary about issues in NEWAG trains that were analyzed by Dragon Sector. Near the end, the documentary featured a recording from the November 2024 meeting of the Parliamentary…
Issue #5 of Paged Out! is out! Here are the most important links: Paged Out! #5 PDF (23MB, release build) Official #5 Wallpaper (10MB, JPG, 8K); there s a PNG on the website as well Paged Out! Website Paged Out! blogpost about #5 and most importantly Call for Pages for Issue #6. We have some amazing articles and art (finally!) for you in this issue – there are 68 pages altogether (including 2 by…
It took us a while, but we re finally doing the first open webinar in English ("we" being my company – HexArcana). It s going to be "CVEs of SSH" presented by Dan Murray ! Dan basically spent the last few months digging into the SSH ecosystem, and has quite a lot of interesting stories to tell. During this talk he ll focus on a couple of high profile CVEs assigned to various SSH client/servers.…
I woke up in the morning, got to the desk in my home office, checked my email, discord, and the news. Then I switched from my desktop to my laptop and... there s no internet. That s weird. I just browsed the net on my PC, so what s up with the laptop? Both are connected to the same network, so it s not the problem of the network not having connectivity. As such, the problem lies between my ISP s…
Obligatory FAQ note: Sometimes I get asked questions, e.g. on my Discord/IRC, via e-mail, or during my livestreams. And sometimes I get asked the same question repeatedly. To save myself some time and be able to give the same answer instead of conflicting ones, I decided to write up selected answers in separate blog posts. Please remember that these answers aren t necessarily authoritative - they…