This is a personal blog, been running this for over 20 years and it reflects my personal opinion only. As a disclaimer, I currently work for Google, and my personal opinions may at times have unintentional biases as well. I promise, I'm human.
I’ve always been fascinated by honeypots. Recently, I decided to run an experiment: Could I build a convincing high-interaction SSH honeypot in just a few days, using Google’s Antigravity and Gemini models as my coding assistants?
Abstract
Abstract
The following post will show some of the top Google Workspace hacks which I use regularly.
Honeypots are not new and lot of organizations use it as an early warning indicator of a potential compromise. You can build honeypots for any service you want, and there are VM images available which actually bundle multiple honeypot services together.
Using third-party libraries is considered a smart decision not only because its faster to develop, but also because these are generally well tested for quality and for efficiency. Additionally some developers prefer to use the libraries hosted on 3rd party CDNs (content distribution networks) which helps reduce latency in page load.
You may have a hard time finding a non-HTTPS site today, but it was not too long ago when the default was HTTP. Sites like Facebook and Google were available without HTTPS/SSL for anyone in the network path to sniff and inject traffic into (even steal passwords and cookies). Some ISPs in particular loved to know what you were searching for, and loved even more to inject javascripts to show…
A long time ago (before Chrome/Chromebooks) I used to own a cutting-edge Dell Windows laptop (with all the bells and whistles), with all the monthly security patches, the best antivirus and a good software firewall. I even had a SANS GIAC security certification, so knew a bit about security. I still got hacked. Not once, but twice in a single month.
While reading a CISA advisory, I realized that one of the common ransomware attack patterns involves compromising an edge network device to gain access to a private internal network. Once an attacker gets in, it gets significantly easier to compromise the remaining devices on the network.
There is a misconception that VPNs have magical powers to protect you. Read on to understand what VPNs actually do, what they don’t tell you and the risks you may be taking when you use them.