I recently set up paperless-ngx and wanted an easy way to simply email myself receipts or documents and get them uploaded and tagged. paperless-ngx is a super cool way to host docs. I wanted originally to just organize and digitize my receipts and taxes in a way that will stay backed up and easy to find. Then I realized I want to simplify it because that process can take a long time manually.…
I played around with just in time users in EC2 using instance connect and a custom built NSS module I needed to PoC a solution for SSH users that are backed by an IdP but ran into some issues. EC2 Instance Connect (IMO) seems to be way under promoted by AWS, and I feel like that’s a real disservice if you need (I’m so sorry for you) SSH (I do for this case). The TLDR for ec2 instance…
I made a Tilt Hydrometer data receiver on a T-PicoC3 microcontroller in go + python This lets me send data from my tilt to (in my case) datadog via Zapier! Lets dive in: The tpicoc3 has 2 chips that can talk over UART. A raspberry pi RP2040 that can read the buttons and write to the TFT An ESP32 that can do BLE/Wifi So for this Im using micropython on the ESP32 to read BLE for iBeacons (tilts…
I abused Github Actions to get full root into the PyTorch ci runners. Timeline 4/18 Initial research/exploit with an automated case response. 4/20 First human response to forward to the pytorch team. 4/27 I reached out to follow up. 5/11 Meta responds that there is no update. 6/9 I reach out again to ask about bounty terms and push for a >6 week response. 6/22 Meta responds: Unfortunately after…
I got my hands on a 1990 Data East Batman Pinball that was in bad shape and refurbished it About a year ago I got my hands on a Batman pinball that was in very bad shape and gutted for $300 (an unheard of price even for that shape). I decided to go all in and just wing it. I removed the legs and bought new Williams/Bally black legs from pinballlife.com You can see the shape its in generally. The…
After two years of failing to deliver a promised feature I decided to reverse engineer and make my own plaato keg firmware I backed this project because plaato makes really good quality stuff. The idea of having a weight based keg estimator for my barcaderator was key. They promised multiple times they’d allow people to capture the data themselves. They have yet to deliver. 1 2 3 4 5 6 7 8 9…
I spent a good chunk of 2021 rebuilding arcades for people If you re going to send me hate letters for pandoras box: go ahead and hit the back button. I made these for people who dont want a bunch of arcades, so every single one of these was pandoras box. I ll share some before and afters: An atari centipede (already JAMMA) in mostly good condition. * PCB and wiring were all fine, but turned into…
I did a talk with stacklet during KubeCon Talk is here This was part of governance as code day at KubeCon 2021
I spent far too much time making a bluetooth dactyl keyboard with built in wrist rests This took about a year, off and on. With covid I finally found some time to finish it. Build Hardware Base was customized heavily by me from this one . Mine here supports less ugly wrist pads IMO, printed in Wood PLA from hatchbox on a taz6 at 0.1micron height Feather 32u4 TRRS cable MCP 23018 io expander Wrist…
We really like Atlantis and smart pre-flight checks. If you see a trend in my latest blogs it’s likely you’ll guess i really like OPA . We use it in EKS to report on assertions consistently across all our clusters. I use it to run tests against the gatekeeper rules. It’s pretty awesome, and it supports terraform plans . The Set-Up I started off by forking the upstream atlantis…
A quick write up of how I have IoT devices that I consider secure (at the cost of my sanity). I’ve spent the last year figuring out what I want to control “things” in my house. And after wasting a bunch of time and money I finally have a set up I like. The Network I don’t have any crazy networking gear, just a Netgear r7000 running Kong I now have a very different set up.…
I did a talk at PyTN about using hacking techniques to reverse engineer beer IoT devices Slides here https://youtu.be/xg2O2oanXgk
Enforce allow/deny Policies in kubernetes at a base controller level I was at kubecon the in mid-November with an old roommate (in the same industry as me) and some coworkers but got to see some cool kubernetes stuff. Since my job crosses the Security boundary, and I’m fairly new to k8s, most of my talks were somewhere on the basic level or opa level . With OPA what you get is a lightweight…
Introducing a modular arcade kegerator The Backstory I recenly got into doing random stuff with arcades. In October 2018 I got ahold of a completely ripped apart San Fransisco Rush cabinet. I redid some of the wood, built a computer into it, reversed all the controls into a teensy and made it play Rocket League. My tattoo shop is currently painting it (build log to come when I have it back). In…
Hacking “aviary” scooters for fun. I recently came across some neglected and forgotten “Aviary” scooters and wanted to see what could be done. Segway ES2/4 This was the easiest hack I’ve ever done. Remove the top panel with security bits, and replace the board with one from ebay similar to this Plug it in and go. Done. Cost: ~$40 Xiaomi Mijia M365 This one was much…
A video of my first and likely last conference talk (lightning talk) about chatops Video here
I one-upped my own bad idea with more badness. Don’t do this. I, uh. Yeah. I assume you read my previous post about my physical deploy button . Well: I one-upped it. Let me explain. Nah let’s cut to it. I wanted to play with AWS IoT and I did so shamelessly with much architecture. The architecture I had a spare Raspberry Pi Zero W with a camera. So I did what any reasonable person…
I made a physical button to deploy production and regret nothing. Over the last few weeks I’ve been looking for a project. I currently work for a python shop and have really taken a liking to it. Simultaneously, I keep seeing new hardware supporting micropython . I’m not against the C ish language that the arduino type stuff pushes for, but it’s nice to get the best of both…
I lose all data from jenkins every time I deploy it. And that’s OK. Background: a rant Let me start off by saying: I’ve done a lot of Jenkins. Exhibit A (super old jenkins with fake pipelines): I’ve done new Jenkins (I love 2.0 and love Jenkinsfile’s). I’ve worked with large jenkins installs . I’ve worked with small jenkins at multiple shops. I’ve…
Now for some cool snippets on how to automatically request certs from the Intermediary we created in Part 1 Dockerfile An example of how I typically get Vault into my base Container: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 FROM debian:jessie ENV VAULT_VERSION 0.8.1 ENV DUMBINIT_VERSION 1.2.0 RUN apt-get update && apt-get install -y \ apt-transport-https \…