Pouncing Dragon

There is zero chance I can terminate a LAN cable in under two minutes, let alone 52 seconds. @saintcon.bsky.social

Amazon brain drain finally caught up with AWS column: When your best engineers log off for good, don’t be surprised when the cloud forgets how DNS works

Scathing, but all too obviously accurate, take on the AWS outage by @quinnypig.com.

You're engaging in professional malpractice if you don't share this with your stakeholders. Corey may be an engineer, but he communicates about the issues in an accessible manner.
www.theregister.com/2025/10/20/a...

Klaus and Glen are ridin' into Wild West Hackin' Fest - Deadwood 2025 with their talk "Dungeons & Dragons: The Security Tool You Didn’t Know You Needed Klaus and Glen" Don't ya go missin' it, virtual con and virtual training tickets are still available! wildwesthackinfest.com/register-for...

When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) August 21, 2025 - Vulnerability Write-up

When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) blog.qwertysecurity.com/Articles/blo...

SpaceFromSpace now features over 500 declassified Cold War era spy satellite images from all over the world! Each one fully browsable, interactive, and free for anyone to view.

spacefromspace.com/declassified...

Gerrymandering: when data science meets moral bankruptcy.

Gerrymandering: the art of mathematically disproving majority rule.

a decorative elaborate wall display of five swords

a denuded wall where only hooks are

so someone broke into my apartment at night and stole all of my swords and im kind of. in shock

YouTube video by Benn Jordan The Art Of Poison-Pilling Music Files

why did it take me so long to find out about @bennjordan.bsky.social these videos are so good
youtu.be/xMYm2d9bmEA

Definitely not just you. Unfortunately it seems like a lot of the old guard are tired of screaming into the void, and a lot of the newer recruits think that security is just some out of the box vendor alerts with an AI company logo stamped in the corner.

yep, this is the way.

Protect Yourself From Meta’s Latest Attack on Privacy Researchers recently caught Meta using an egregious new tracking technique to spy on you. Exploiting a technical loophole, the company was able to have their apps snoop on users’ web browsing. This tr...

Meta’s track record on privacy was already spotty, but the newest web-to-app trick is particularly brazen. Here’s what to do next.

Malware and Memory Forensics Training - Memory Analysis Malware and memory forensics training courses offered by the Memory Analysis Team.

Our highly popular and technical training, "Malware and Memory Forensics with Volatility", has been fully converted to @volatilityfoundation.org 3 and significantly updated, including many new sections and 8 new, in-depth labs. Available online & in VA in October

memoryanalysis.net/courses-malw...

Flock’s Newest Police Tool Sparks Data Controversy Flock Safety, a license plate reading tech firm that recently bought a drone company, is taking heat over the data sources for its new platform. It’s not the only law enforcement technology attracting...

“If the reports about Flock Nova are true, this is precisely the kind of dystopian panopticon we’ve warned about,” EFF’s @mguariglia.bsky.social told Government Technology News.

A very appropriate description of email these days.

YouTube video by MegaLag Exposing the Honey Influencer Scam

Y'know, I've never taken any sponsorships, I'm very skeptical at the best of times and no sponsorship I've ever been approached about has ever passed my sniff test, so I thought I knew where this was going, but this is bigger scam than I'd expected.

www.youtube.com/watch?v=vc4y...

Intercept SSM Communications - Hacking The Cloud With access to an EC2 instance you can intercept, modify, and spoof SSM communications.

Nick Frichette’s research shows how gaining EC2 access can let you intercept and modify AWS SSM communications. By spoofing the SSM Agent, it’s possible to manipulate EC2 messages or sessions. Check out the tools and techniques explored in this fascinating deep dive:

You're supposed to hold onto them. Eventually there will be enough companies represented in that stack that they'll be able to file a class action lawsuit against you. Do you have any idea how much YOUR data escaping has cost them?! /s

Still have mine as well, with a couple old tokens still
in it. Lots of great memories.

Nice work! Looks like that was a fun project.