Currently Reading

11 links

My Bookmarks & Notes for July 2026

• My OSCP Pentesting Cheatsheet
• Mobile Verification Toolkit
• Claude design system prompt

Microsoft Copilot on GovCloud got a large feature boost. Waiting on FedRAMP approval for Anthropic to enable Cowork. Copilot Calendar integration still 100% broken for Gov.

ChatGPT vibecoding the Codex app directly to production is a bold strategy; let’s see how it works out for them…

22 links

My Bookmarks & Notes for June 2026

• IIS Best Practices
• Microsoft Scout documentation
• dom-to-pptx

Elevated password spray activity across tenants. New actor spamming honeypots port 8080, same actor from Iran using proxies in Denver and Vegas to spam Azure CLI authentication endpoints.

Estimated that my API costs for things like Shodan, Censys, etc. have gone up 20% since the start of the year. I currently pay for 12 services. Time to start the annual cleanup

16 links

My Bookmarks & Notes for May 2026

• Why does it take so long to release black fan versions? | Noctua
• (20) Azure Databricks Unity Catalog with Purview - YouTube
• 8values Results

Setting up new Herms Agent for a small team of 10. Email communication. Fully isolated and whitelisted. Using GPT 5.5 as model.

62 links

My Bookmarks & Notes for April 2026

• Is BGP safe yet? · Cloudflare
• Sycamore
• Lemonade: Local AI for Text, Images, and Speech

The words “Fireside Chat” are starting to cause panic attacks. Especialy when combined with “FedRAMP or CMMC”. CMMC in 2026.. still a nothingburger.

26 links

My Bookmarks & Notes for March 2026

• A GitHub Issue Title Compromised 4,000 Developer Machines | grith
• acidvegas x blog - the shady world of ip leasing
• Cloud VM benchmarks 2026: performance / price

This Delve thing is going to cause trouble. Claude Code disclosure had a ton of interesting info, mostly confirming assumptions but also some new nuggets. Already everyone is renaming their AGENTS.md into SOUL.md. I am adding PRAYERS.md now..

44 links

My Bookmarks & Notes for February 2026

• stun/cmd/stun-nat-behaviour at master · pion/stun
• crackle
• NCC2019 - hwio_bluetooth_webinar.pdf

It feels like CISA has been hollowed out like a windows process. Its still running but you are not interacting with the same service anymore.

36 links

My Bookmarks & Notes for January 2026

• 39C3: Power Cycles - media.ccc.de
• It’s hard to justify Tahoe icons @ tonsky.me
• The Kimwolf Botnet is Stalking Your Local Network – Krebs on Security

New Year. Same as Old Year.

More inflation. Cost of my cloud + all the subscriptions is up 20% over 2025.