archives

2020 (92)

20-09-28 DMARC email security and bug hunt
20-09-28 Bike thief redux: chased off
20-09-27 Voice Audio Spectrum
20-09-16 SmartMic/SmartMike+ Bluetooth Capture
20-09-15 Heated handlegrips go on
20-09-15 SmartMic audio quality update
20-09-15 SmartMic, a SmartMike+ Clone
20-09-12 Covid Tracker: contact size drops?
20-09-10 Hot Shots Part Deux: Redux
20-08-31 Hot Shots: Part Deux
20-08-24 Pandemic Web Cam Shortages Begone
20-08-24 Hand Tool Rescue: IRL YouTube
20-08-23 CRA adds Captcha: with flags of the world?
20-08-22 Covid exposure app results
20-08-11 Covid testing app: the details of the privacy guarantee
20-08-10 Real Genius
20-08-09 Covid Tracing App: First Results
20-07-31 Canada Covid tracing app: get yours today!
20-07-28 TIL about Dr. Ignaz Semmelweis
20-07-24 2-Factor Authentication Leaves Me In Colouring In The Dark
20-07-17 Change.org, Apple, Web Push: you can make a (minor) difference
20-07-07 Got Shopify? Need CCPA or GDPR Compliance?
20-07-01 TIL: The Wolf of Wall Street Caused Section 230
20-06-29 Looks like it will be a quiet Canada day in the office
20-06-29 Using ng serve with Angular Service Workers
20-06-28 Murdoch Murders Millions
20-06-17 Of Audio Books and Public Paths: Bodice Ripper Edition
20-06-14 Foreign WiFi Muffler Bag: Take 1
20-06-13 MacGyver phone redux
20-06-12 Phase 2 starts!
20-06-11 Our office gets in a Coke commercial
20-06-06 And you thought your bank was bad…
20-06-04 Chartered Accountant Hack: It Will Be What We Don’t Expect
20-06-04 The end of the 767 era
20-05-29 Badda Boom Badda Gone
20-05-28 Activist shareholder approach to social change?
20-05-26 Another day, another IP-enabled widget
20-05-25 Tax Font?
20-05-25 Purple light autopsy: bleeding has stopped
20-05-24 Whodunnit: the case of the chipmunk
20-05-24 De(ep)-purple the lamp: extreme edition
20-05-22 Quarantine issues: purple lamp edition
20-05-20 Crypto kitty as an inflation hedge
20-05-12 Trace the traffic of a docker container
20-05-09 The MacGyver phone: great success
20-05-09 MacGyver’in up an IP phone
20-05-05 The 3-step tax security dance
20-05-04 CNCF Eastern Canada: Tune In To Hear Yours Truly Tell You A Story
20-05-04 When the hose flows, the printer goes, dontcha know
20-05-03 Using the github bots to find vulnerabilities
20-04-30 Should we make Cyber Security part of WHMIS in 2020?
20-04-30 Can AI Innovate: USPTO says NO
20-04-26 Eviction Notice Shows Layers of Technology
20-04-26 Discretion the better part of valour: Foxes & Cats
20-04-24 Rock paper scissors ruled game of skill
20-04-19 The (other) infection pandemic
20-04-18 Fan #2 gets the IP treatment
20-04-14 The tale of the breadmaker
20-04-14 Digital Vampires Sucking the Internet Dry
20-04-13 Let’s Encrypt: Misrouted? Malfeasance?
20-04-11 Pre-commit hook for Kubernetes YAML
20-04-09 Spearphishing and 2-factor authentication
20-04-08 The ineficient market of public procurement
20-04-08 CORS AND WEBEX
20-04-04 The fan gets an IP address
20-04-04 When your business becomes a (literal) dumpster fire
20-04-02 Protect against the Covid-themed phishing phree
20-04-02 Our first covid 19 casualty
20-03-28 The digital divide: a policy proposal
20-03-24 Spring has sprung, the bat has ris
20-03-23 AI & Chatbots to help
20-03-23 Mother nature is a big tease
20-03-22 Spring has sprung, its tire change time
20-03-20 Live Free and/or Die
20-03-20 Today is the day it should all disappear
20-03-19 Shawarma delivery model
20-03-17 St Patricks day in Quarantine… it’s quiet, and no Rovers
20-03-14 My first day without Python 2: slack was the first casualty
20-03-10 The phone port scam saga continues
20-03-09 Phone number porting scam gets personal
20-03-05 I was painted purple. Will I die?
20-03-03 How much electricity is it per click? The sad case of the smart meter and dumb limit
20-02-16 The Sad Case of the ccTLD, the CSP, and the Wildcard
20-02-16 My content-security-policy has blocked more malicious ads
20-02-09 Voice mail security?
20-01-29 I don’t run ads, I don’t serve malware
20-01-27 Next Waterloo Technology Chautauqua is nigh: who wants to learn about web app/api/site security?
20-01-25 ASSESS WEB SECURITY SIMPLY. YOU. YES YOU.
20-01-18 Project lightboard: suggest some topics
20-01-15 CIRA Community Investment Program grant applications open
20-01-08 Bike theft not a thing in downtown Kitchener?
20-01-04 Experiments with the light board

2019 (73)

19-12-22 City Operations: Snow removal
19-12-21 Project lightboard
19-12-19 Phase 1 of blocking robo calls goes live in Canada today
19-12-16 Legal AI Chatbots: how long before privilege attaches?
19-12-05 TIL that the git-hash for docker:dind and shaggy from scooby-doo are related
19-12-04 Enjoy now? Give up welfare? What choices I must make!
19-11-18 Venture Accelerator is a fan of 2 famous communists?
19-11-13 More gadgetry? 0-10V light control for the new office
19-11-12 Tis the season to install your winter bike tires
19-11-04 Goodby Mr Loser? We get a new projector
19-11-04 Tis the season to keep wikipedia running
19-11-03 The ridiculous futility of winter-proofing the bike has begun: bear paws
19-10-29 2-Factor Authentication: The great switch to Authy from Google Authenticator
19-10-29 The landrush that is naming on the Internet
19-10-03 Canadian banks still don’t have 2FA. Who are the real criminals here?
19-10-02 Use chrome? Use passwords? Take 2 minutes and check their value
19-09-18 Marketing 101
19-09-16 e-bikes and UPS: no, not really
19-08-20 Google Docs and US Patents: Number Your Paragraphs for Posterity
19-08-19 CORS’ing the complexity: idempotent and caching meets Vary: Origin for CORS
19-05-23 Opening the hiring taps: first legit job ad is up!
19-04-14 The LED bulb project: an autopsy on some failures
19-04-12 Stack overflow says I am the 1%
19-04-10 The mysterious cat feeder of the 101
19-03-31 Quick and dirty real-time sync of local dir into a container (perhaps in Kubernetes)
19-03-31 The sad SaaS state of software sufferin’ succotash
19-03-31 Premature tire removal!
19-03-28 The rite of spring (snow tire removal, not stravinsky)
19-03-27 Productivity in the new world economy: machines create and consume information
19-03-22 ‘first’ and ‘only’ are four-letter words in cloud. How to do something `once` and `first` in a Kubernetes Deployment
19-03-16 Increase your CI speed && decrease your cost. The preemptible node
19-03-16 Let’s Encrypt Staging. Curl without the -k
19-03-16 Let’s Encrypt Staging. Safely.
19-03-16 pause: how to debug your Kubernetes setup
19-03-13 When you throw in the towel on declarative
19-03-11 Gitlab via the API: prepare a repo with automatic deploy keys and protected branches/tags
19-03-10 Ancient wisdom of books?
19-02-25 Multiple Kubernetes contexts and your multi-coloured prompt
19-02-21 What’s your open source profile?
19-02-21 I Declare is not the same as Make It So
19-02-20 Cloud logging and the return of `dink`
19-02-18 When did stack traces become the new user interface?
19-02-15 You want to see something really random? Infinite entropy returns
19-02-14 Using single-sign-on oauth2 across many sites in Kubernetes
19-02-10 Project Block Heater: an update
19-02-09 IoT (h)army: hacking the smart switch
19-02-06 Cloud anti-pattern dilemma: shared ‘state’
19-02-03 DoS’ing the cloud with logs
19-02-03 Helm, Kubernetes, and the immutable configMap… a design pattern
19-02-02 Project Block Heater
19-02-01 A smarthome platform bytes the dust: Lowes Iris is dead
19-01-31 Crispy Cold Cyclist Counters
19-01-31 Tales from the Road: Christ the redeemer of … coupons
19-01-31 Snooping on your Kubernetes nodes containers without ssh’ing to it: dink
19-01-30 Brrr… bikes and batteries. We need more torque!
19-01-28 I thought the cloud was modern? The sad tale of the 32-bit world
19-01-27 When the bulb costs more than the lamp…
19-01-26 Smart locks on an AirBnB in oakland? Are you nuts?
19-01-25 The sad case of the DNS and the Deployment
19-01-21 Cool weather and e-bikes observations
19-01-20 Cool weather and e-bikes
19-01-18 Lucky iron fish soup
19-01-15 Security and the Cloud: The need for high bandwidth entropy
19-01-14 Mickey Mouse Arrests DDoS Criminal. 10 years hard time!
19-01-14 $$$ if you are interested in building a better online Canada?
19-01-10 Button down your 2-factor-auth and dnssec lest ye be hijacked
19-01-10 work versus toil, TLS, government shutdowns
19-01-08 Doorbell licker: are your smart appliances giving you too much information?
19-01-06 Electrocute your hands with this new gadget!
19-01-04 Another cloud suicide: Cloud lessons on pinning and semVer, and CI
19-01-04 High precision web error codes and cloud availability
19-01-02 The risk of the link shortener
19-01-01 Deleting pipelines in Gitlab 11.6

2018 (327)

18-12-30 The humble power bank as a marketing swag giveaway: Don’t bother
18-12-30 The car charger virus arrives
18-12-24 When good recursives go bad: why does 1.1.1.1 not give the same answer as 8.8.8.8?
18-12-20 Force docker to always rebuild from a certain layer
18-12-20 Build a docker container with a relative path to another directory
18-12-17 The art of the dramatic demo: Knative and ‘serverless’ in Kubernetes
18-12-17 Phippy and Friends: Kubernetes gets simpler
18-12-15 Project solitude: silence the power supply
18-12-11 Sponsor a conference as a means of hiring?
18-12-11 Tis the season for charitable giving
18-12-07 Are you tech enough for marketing?
18-12-07 Never SSL
18-12-07 When managed software goes bad… A cloud tale
18-12-06 Canadian National Cyber Threat Assessment
18-12-06 The studs on bike in snow verdict: great success!
18-12-03 Swap from Debian to Ubuntu as Linux image on Pixel Slate Chromebook
18-12-03 Bringing Python 3.7 to the Chromebook
18-12-03 The many minds of the Chromebook
18-12-03 I am the new snow stud! Meet the tires that will (hopefully) keep the bottom of the bike below the top
18-12-03 Suicidal clouds cause consternation
18-11-27 Supply chain risk: more javascript npm shenanigans, OSS governance
18-11-27 Why does Bell Canada not allow encrypting your email in transit?
18-11-27 Do the phish scammers care more about your security than you do?
18-11-27 Why is Canada worse than the UK and US for encrypted web?
18-11-26 Next Chautauqua: Continuous Integration!
18-11-23 Best Black Friday deal: Shodan membership for $5
18-11-16 Separate CI cluster woes: can hierarchical caching help?
18-11-15 CI’s Gone Wild: Totally Tenacious Test Tuning
18-11-13 Laughably Loquacious Logging
18-11-12 Its looking like HTTP/3 will be all encrypted and all UDP, all the time
18-11-12 Smart speaker bearing witness in murder trial
18-11-11 Today’s adventure: the Chevy Bolt gets a double dashcam
18-11-09 The agony and the ecstasy of the read-only
18-11-09 Have you set your security context recently?
18-11-09 PSA: launcher.gcr.io is not being maintained
18-11-07 Ontario Cannabis is first past the post for PIPEDA breach disclosure
18-11-05 Kubernetes volume-mounts with subPath and inotify. Bah humbug
18-11-05 My LED bulb saga: a chart to show the consumption
18-11-01 The election that ended open source?
18-10-31 DNS roulette
18-10-31 Radon is November month. Or something like that. Check early, check often
18-10-30 An autumn ride home through Waterloo Park: the video
18-10-30 Hackable spoke lights? Sign me up!
18-10-30 The fastest hacking tool in the world is a microphone
18-10-29 T-2 for reporting breaches under PIPEDA
18-10-29 Dramatically simplify developing your app for Kubernetes: a sample
18-10-29 Duck Duck Toddler. A Waterloo Park Adventure
18-10-29 Dark off-roading: fat tires to the rescue
18-10-28 Kooking Kontainers With Kubernetes: A Recipe for Dual-Stack Deliciousness
18-10-26 Microservices unplugged: Chautauqua meetup filmed and posted
18-10-25 Lessons learned: COPY . and geometric size progression
18-10-25 Pytosquatting, Supply Chain Risk, and the Slovak National Security Bureau
18-10-25 Software supply chain risk management robots
18-10-24 My webinar today on surprises in cloud security migration
18-10-23 The return of the bike thief: spoiler, the lock held, but my hands were cold
18-10-22 One letter ~= 700K. The taxpayers of DC are sad
18-10-22 The case of the nosy neighbour: Azure is poking me!
18-10-18 Cat eating pigeon related packet loss in SMS? Banking in the 21st century
18-10-17 The quest for minimalism
18-10-17 Pruning elastics with Kubernetes CronJobs
18-10-17 The chautauqua continues next week: meetup on microservices @ Auvik
18-10-16 A purple monkey ate my homework? The inter-connectedness of cloud
18-10-16 Misguided auto-updates in a container world
18-10-15 The deflation of crypto-currency (stinking cesspool!) and crypto-kitties: an update
18-10-14 The brave new world of soldering iron software: work-around QuickCharge 3.0 charger issue
18-10-14 Of E-bikes and range and efficiency
18-10-12 Blockchain is a stinking cesspool… Tell us what you really think!
18-10-12 Skeeter + Bubba: two TCP options that might have reshaped the world
18-10-11 Tales from the road: the worst airport queuing in the world, and Don eats a Cairo pigeon
18-10-10 LightBulbs of Unusual Size: Is this ‘bright-like-the-sun’ big like a planet also a death-star?
18-10-10 O great SHA, protect me from this hack
18-10-09 Bloomber’s latest: the hack was in the Ethernet connector. Plausible?
18-10-07 The supply chain security risk in action: ESLint
18-10-06 When good containers go bad: github issues are the new release notes
18-10-05 ELI5: How can I protect (a bit) against this BMC issue?
18-10-05 ELI5: Bloomberg, China, Supermicro, Apple, Amazon, Facebook et al security
18-10-04 Even more gadgets! light-up valve stem for the bike
18-10-04 Another new gadget: the TS80 USB-C soldering iron
18-10-04 CIRA election results: I’m in
18-10-03 The rabbit-hole of log parsing: istio-proxy sidecar log routing and parsing with fluent-bit
18-10-02 The upstream software risk. Are we really checking it?
18-10-02 Gadgets! my new travel buddy: the Xioami usb-c active-node-cancel headphones
18-10-02 My upcoming webinar on security surprises in cloud migration
18-10-02 Casual rental transportation devices
18-10-01 Bike helmets work. And some surprised ducks
18-09-30 Debugging in the container: http when you don’t have curl
18-09-30 Debugging in the container: how to resolve a host when you don’t have the tools
18-09-29 Laser bike lights!
18-09-28 Scroll-wheel zoom for KDE and bad eyesight
18-09-28 CIRA voting has begun. And bad SSL ensues
18-09-25 Cloud 101, for free: Microsoft Learn
18-09-24 Cloudflare DNS and purge item
18-09-23 Sarcasm as an education tool: how to micro-service
18-09-23 How a computer predicted an election, and was ignored
18-09-22 When an electric bike isn’t. Some sort of re-settable fuse?
18-09-21 Burn down the world (figuratively) get probation. The enforcement side of cyber-security
18-09-20 CIRA campaign forum is open
18-09-19 When your security tools cost more than the thing they protect
18-09-19 Why ranked voting doesn’t work: Arrow’s Impossibility Theorem
18-09-19 Upcoming CIRA election, my thoughts on policy directions
18-09-17 If you can’t clean ’em, cook em’. Glass cleaner goes turbo
18-09-17 More bike thievery
18-09-17 They got in via the logging! remote exploits and ddos using the security logs
18-09-17 The infinite uncertainty engine: what cloud can learn from telecom
18-09-16 Of Twitter Cards and SSL Ciphers and Mismatches
18-09-14 The spirit of optimism is alive in uptown waterloo
18-09-13 Increasing the usefulness of your Kubernetes Ingress logging
18-09-13 How to avoid being logged, Kubernetes-style
18-09-13 How cloud storage services can be like an airline sandwich: complex pricing and purchase
18-09-10 lte+: amazing in high noise
18-09-10 Randomise your mac address to deter wifi tracking
18-09-10 Private dns is the tastiest part of (android) pie
18-09-08 Minnesota love
18-09-06 Accessing a service in a different namespace from a single ingress in Kubernetes
18-09-05 Automatically ssh to virtual machine with private IP without a jump box, as if it were public
18-09-05 Lessons from the cloud: it’s not fast: it’s wide
18-09-04 I’m picturing a museum with 4 billion exhibits
18-09-03 Using Azure Container Instances to expand CI?
18-09-03 Azure Kubernetes Service (AKS): batteries not included
18-09-03 Navigating the restrictions of CI and Bazel
18-09-03 DNS over HTTPS on OpenWRT 18.06
18-08-30 Tales from the road: the one with the taco and the shoe-shine.
18-08-30 Should I use my CI pipeline to do continuous delivery? A controversy!
18-08-29 Tales from the road: of Russia, Google, Trump, search results, and opening a new front
18-08-29 Insecure web sites. #tlswallofshame
18-08-29 Endoscope: snoop around inside your Kubernetes pods
18-08-29 She drives me crazy (passwords)
18-08-28 Bike v3 has arrived. Should we bait-bike the old one?
18-08-28 Docker + Fluentd + Elasticsearch logging
18-08-27 Tales from the road: the one with the rich cowboy and my trust in fellow humanity
18-08-27 If you don’t stop doing that you’ll go blind: subtract the noise to increase the signal
18-08-26 Tales from the road: the one with the couples massage
18-08-24 Your cloud firewall is sleeping on the job: the (new) Apache struts vulnerability
18-08-24 T-mobile data breach: it continues to be what you don’t expect
18-08-23 Use vim to open the line from gdb (or gcc err output)
18-08-23 Tales from the road: bait? really? Is that the correct translation? kräftskiva!
18-08-22 DIY 2nd (4th?) monitor
18-08-22 Olestra and Information leakage
18-08-22 A fruity voice talks about pig-iron? Foreshadow makes all your secrets belong to us!
18-08-21 Its time for progress to get off my lawn!
18-08-21 Tales from the road: the longest daytrip with the zebra
18-08-21 Git, fork, use: how do I?
18-08-20 Changing the size of a persistent volume in Kubernetes 1.10 on GKE
18-08-20 Tales from the road: Paris airports and scooter cabs
18-08-19 Tales from the road: homesick in china? We’ll fix that for you!
18-08-18 The intimidator: meet the new bike chain
18-08-18 Tales from the road: the jamaican hotel switcheroo
18-08-17 Changing the WiFi / Bluetooth in Asus x470-I motherboard
18-08-16 LoraWeb of bike trust ‘lojack’
18-08-16 Tales from the road: the shit-shoe scam
18-08-15 Bike 2: the sequel
18-08-15 Shipping roulette: sometimes its 00
18-08-14 I gave my debugger a std
18-08-14 What a wicked NAT we weave: detangling the cloud
18-08-13 The great e-bike heist. And then there was none
18-08-12 Disco mornings
18-08-11 Tales from the road: going through security, immigration, boarding flight, without checking in
18-08-10 Tales from the road: the cuisine of Taipei
18-08-10 Taming the chatty firewall log
18-08-09 Am I me? Are you you? The existential crisis of containers, not of Camus, and SPIFFE
18-08-09 Tales from the road: the (non hello-kitty) Shinkansen
18-08-08 Fighting the pen-test with regex and sweat
18-08-08 Crypto crash means graphics upgrades!
18-08-08 This pie needs more raisins!
18-08-08 Tales from the road: rabbits and cats
18-08-08 Tales from the road: great expectations and the cheese sandwich that wasn’t
18-08-07 My build is slow: understanding resource limits and steal time in the cloudy world of cloud
18-08-07 Tales from the road: the pantless seat-mate
18-08-05 History in photos: my new office
18-08-05 Ceph in the city: introducing my local Kubernetes to my ‘big’ Ceph cluster
18-08-05 Downward scaling the cloud
18-08-05 You ever wanted a fast convenient SSH but sometimes only had a browser?
18-08-03 Got domain? Its only $1
18-08-03 Of meetups and chautauqua and topics
18-08-02 My first election campaign! CIRA
18-08-01 A free yubikey w/ a cheap subscription to wired? What’s the catch?
18-08-01 Capture the traffic of a process (and nothing more)
18-07-31 Less is more
18-07-31 Attack of the rack: the killer was in the house!
18-07-30 The agony of NFS: the knife twists a bit more
18-07-25 Spam sushi in a vending machine? People feeding trash pandas at underpasses? Must be in California!
18-07-22 Got Intel? Got security hole
18-07-20 Static Application Security Testing (SAST) and Nodejs (with Gitlab CI)
18-07-20 Kubernetes and private registries and names: your registry credentials everywhere
18-07-19 One line remote shell on the sly
18-07-18 The most obvious things are the hardest to spot: RF interference and the bluetooth keyboard
18-07-18 I can’t A4rd to not read the fine print on this scam
18-07-18 In the waterloo(ish) area? like to discuss the technology of getting great products/companies going?
18-07-17 Ontario health breach and cyber defence strategies: its not just the choke (perimeter)
18-07-17 Completely Complex Cloud Cluster Capacity Crisis: Cool as a Cucumber in Kubernetes
18-07-17 Commuting to the cloud: traffic in the information superhighway onramp
18-07-10 Cloud simplicity: NOT!
18-07-10 Upstream risk: the vanishing
18-07-09 The mysterious life of outdoor cats, solved, sadly
18-07-05 Suffering sisyphean security solutions: make your chrome part of the solution
18-07-04 Can’t beat em? join em! Brick and mortar and online
18-07-02 systemd versus chrome: fight!
18-07-01 The port of the devil: the nanny state browser protects me!
18-06-29 My early co-op career comes back again
18-06-29 Outdoor cats and air conditioners: just say no
18-06-29 Trust thy neighbour: the windows equivalent of curl | sudo bash
18-06-28 Blocking sketchy sites by default
18-06-27 The bleeding cloud: new exploit based on hyperthread leaking
18-06-27 Screen scraping vnc? docker meets windows meets vagrant meets packer
18-06-27 Google adds filestore. But what about the Kubernetes unmount issue?
18-06-26 avx the saga continues
18-06-25 The race to do nothing: how disruptors become dominant
18-06-21 Back to the avx2 bug in my skylake
18-06-21 Got a host directory? Wish it were seamlessly mounted in your VM? Want to avoid NFS? 9p!
18-06-21 IPv6 tunnel brokers: They’re Back!
18-06-17 The case of the inconsistent SSL: AES-NI broken? Bad CPU?
18-06-10 Cloud billing and bugs: log ingestion
18-06-10 DTS-HA MA and devices that don’t support
18-06-09 Blockchain vs GDPR: fight?
18-06-08 Moving into a new (cloud) neighbourhood? Check its reputation!
18-06-08 Oh Snap! Fonts in Roman Times
18-06-07 Security of the upstream code, and, the importance of the egress firewall
18-06-05 Outdoor kitty update: he’s back
18-06-04 Of electric bikes and cargo: 3D printers and thermos
18-06-04 For $35 how could I go wrong? drone takes flight!
18-06-02 More on the ‘now I know its not secure dilemma’
18-06-02 To know and do nothing, or to not know: which is worse
18-06-02 Dual identity git
18-05-28 Scared? Or Bored? Terrorists and the power grid, a real page turner
18-05-27 The agony of NFS for 25+ years of my life! Then and now. ClearCase and Kubernetes
18-05-27 Gitlab cookie transparency: GDPR in action
18-05-26 Hack or Genius: cloud backup revisited
18-05-25 Gadgets w/ wheels and batteries arrive: electric assist bike
18-05-22 Deep state idle
18-05-22 Today’s post brought to you by the letter ‘k’: quickly re-pull an image in kubernetes
18-05-15 Mjölnir: nethammers arrive a few years later than rowhammers
18-05-15 DDoS my wallet: more on cloud pricing
18-05-11 Running magnum (Kubernetes orchestration) on OpenStack Queens: lxd to the rescue
18-05-10 Chrome & G-Suite: profile madness to enable multiple identities
18-05-09 Hack or genuis: cloud backup, you vote!
18-05-08 Upstream risks and vulnerability assessment
18-05-08 Cloud Lessons: Of gits and ci’s and pipelines and k8s and charts
18-05-07 API keys, clouds, tokens, security
18-05-06 grep using icmpv6 and ptrace?
18-05-04 The docker reach-around: hacking containers for fun and profit
18-05-03 xkcd expresses the enlightenment that comes from the onion peeling of containers
18-05-02 Peeling the stinky onion that expresses the beautiful simplicity of cloud
18-05-02 Cloud billing ~= Telco billing?
18-04-23 Science, Cats, and Japanese Game Shows: Together at Last
18-04-19 More tradeshow shenanigans: a donut wall
18-04-19 The Bay area’s finest Internet
18-04-17 A tradeshow giveaway that eats a bit of your soul and ego
18-04-16 Carnot efficiency and high tech. And a PSA: update your home router
18-04-11 The LimeWire of today? Software hubs and caring what you share
18-04-10 The naked cloud: elasticsearch is stretch but doesn’t cover security
18-04-10 The naked cloud: insecure by design (or, how you can’t push a rope)
18-04-09 UFO Landing!
18-04-08 Like network neutrality? Like John Oliver? Then you want to try this URL!
18-04-08 Containers, ttys and curses
18-04-06 Pragmatism and safety:
18-04-03 Radon season?
18-04-02 DNS over HTTPS: enabling, padding, live. Great success!
18-04-02 DNS over HTTPS with Cloudflare, an experiment, some timings, lots of promise!
18-04-02 DNS over HTTPS, Internet vanity-plate IP addresses
18-04-01 Running a GPU-accelerated application in an LXD container
18-04-01 The case of the missing pyrex stopper: 3D printing to the rescue
18-03-29 The invisible pimp hand of the FCC keeping Huawei out
18-03-28 How’s your dnssec?
18-03-28 What, another new DNS record to add? The CAA record and your SSL certificate
18-03-28 Its happening: the distrust of Symantec certificates, and e-commerce
18-03-27 WiFi and the bible, a puzzle for you
18-03-27 DNS for authentication of ownership, and orphanage
18-03-25 Speedtest & BBR, consistency
18-03-23 Et tu Redis? Another spear in the ‘trusted environment’ ideal
18-03-23 That’s the kind of password an idiot uses on his luggage: cloud security
18-03-22 The unbelievable weakness of identification/authentication, bank edition
18-03-21 The smarts inside the smart switch
18-03-21 Smarten-up you wall switch! The Ecobee Switch+ (with various assistants)
18-03-20 Advertisement traffic is >=40% of bandwidth
18-03-20 The curious case of the door latch, or, is there anything a rotary tool won’t solve?
18-03-16 Shodan adds Canada page!
18-03-15 I yaml’d my network: netplan and the new world order
18-03-15 Using shodan to assess a country’s risk: revisited
18-03-15 Credit checks as a way to assess risk
18-03-14 More LoRaWAN RF madness. The Tektelic Kona Pico Gateway
18-03-13 Authoritarianism, Globalism, and my gadget shipments
18-03-10 What, more Radon in the Waterloo Ontario region?
18-03-08 2018 upcoming CVE’s, sneak peak, courtesy xkcd
18-03-07 Wireguard: simple VPN/tunnels
18-03-06 My laptop got insomnia: Secureboot and the mobile machine. Hibernate is the collateral damage
18-03-05 The case that could rock the cloud world
18-03-05 A feral cat IoT army for misdirection: the invisible hand and national defence
18-03-05 Radon & You. Yes, you.
18-03-04 Recognising popunder advertisements with machine learning: an implementation
18-02-27 Cryptokitty: collectable, breedable, adorable. This is meow life now
18-02-27 Machine Learning as a way to block ads (that carry malware? specifically crypto-miners)
18-02-24 vermut: first time in 10 years w/o
18-02-24 Is my password known? A problem
18-02-22 Security liability for software vendors, open source on end of support? Great ideas France!
18-02-22 Self-signed secure boot, the why, the how, the what to look out for
18-02-22 Let’s Encrypt: huge impact to society, to me, and wildcards coming soon!
18-02-18 Bitcoin crypto mining hashing spectrum, breaking mobiles, endangering first responders
18-02-16 The LoRaWAN dragon comes to roost at my house
18-02-15 Still doubting you should check your radon?
18-02-14 Success smells like burning hair? Sticking it to big butane.
18-02-13 From the ‘shut up and take my money’ category: true security for voice
18-02-11 Once upon a time, a story of how a few believable facts can augment a total lie
18-02-08 Falcon Heavy launch: what we saw
18-02-07 Roaming mobile data usage during high congestion
18-02-06 great success and a skid of champale
18-02-06 liquid oxygen clouds
18-02-06 t minus 1 hr and starting liquid fuel
18-02-06 5 minutes to fueling falcon heavy
18-02-06 2:30 to go, winds, bring on bill nye to entertain the crowd
18-02-06 Feel the heat: 3hr to go!
18-02-03 Laser pointer no longer best method to entertain a cat?
18-02-01 Radon update: my basement is (currently) safe from this scourge
18-01-30 More hacking to secure the gadget army: The KanKun SP3
18-01-29 8-bit memories and covert exfiltration
18-01-24 Data breaches: its the risk you don’t expect that gets you
18-01-23 The power of (your) invisible hands: could we create a security and efficiency incentive that works?
18-01-23 The WyzeCam / Xiaomi Fang
18-01-19 Hacking the hikvision: part 2
18-01-18 Hacking the Hikvision: part 1
18-01-18 Crypto on the keychain: the Ledger nano s
18-01-18 What is the temperature of a feral cat’s butt?
18-01-09 Upgrading the Insecure Army of Internet Things… onwards to the cameras
18-01-09 Is your meltdown fix working?
18-01-08 OK, I’m diving in, the garage NAS shall run Debian
18-01-08 Ignorance is(?) bliss: the agony and ecstasy of home sysadmin
18-01-03 Cold weather and stray cats
18-01-02 Decoding the Airthings Wave Radon output

2017 (68)

17-12-31 Slaac’ing off on ipv6 privacy
17-12-30 What are we buying? A wifi baby camera. Will it be secure?
17-12-22 The Internet of Radon Things
17-12-22 Update on tire repair adventure: Great Success!
17-12-17 The brave new world of car charger virus: my prediction for 2018
17-12-14 Blockchain and supply-chain management: its not just me!
17-12-13 The environmental disaster that is bitcoin: get some efficiency or GTFO
17-12-12 3-way switch replacement: puzzlement
17-12-10 Edison, Elephants, Subscription light switches, and Automation to reduce power usage
17-12-09 Tis the season for 3D cookie hackery
17-12-07 Assessing a country’s risk: Mirai/Satori, Argentina
17-12-07 What are we leaking? Maritime dangerous goods, korea, iot and mqtt
17-12-05 Using shodan to fingerprint…. shodan
17-12-03 Shodan to assess a country’s risk
17-12-03 More shodan shenanigans: VNC with no authentication?
17-12-02 Exposing SCADA to the Internet: Nobody expects the shodan inquisition!
17-12-02 Spear-Phishing defence, the US census, punycode, and certstream
17-11-29 New product idea: add wire adapter
17-11-28 Controlling the sonos + receiver with voice
17-11-27 Universal inventory management
17-11-26 The new Corsair supply and Netdata
17-11-26 A Confluence of Crap: the odds were poor, but balanced
17-11-25 Zigbee relay: Success! Sort of.
17-11-25 Today’s adventure: adding a Zigbee Home Automation dimmer + relay
17-11-24 Discovering what you are using in the cloud
17-11-24 Today’s adventure: tire repair the way they never taught you in shop!
17-11-23 Its humidifier season here, and boy did these ones get crusty
17-11-23 Laugh at my self-inflicted misfortune, hack edition
17-11-22 Project thermostat: got some time to work on it this afternoon, and its starting to come alive
17-11-20 Update on the Outdoor Kitty (aka the mooch): contact!
17-11-18 Epic rock
17-11-15 The mystery of the home DNS blackhole
17-11-15 Stinky Cat Syndrome: Why no robot for this?
17-11-11 US district court of marshall texas
17-11-11 A gas station as a destination?
17-11-02 Today’s adventure: inflating a balloon to increase water pressure
17-11-01 Today’s adventure: lightbulb festoonery!
17-10-24 surfing the crimson tide: cellular data coverage @ high density
17-10-16 Fire + IP == good
17-10-12 Ceiling fan update: capacitor fixed the motor, working on zigbee for lights
17-10-10 I’m a big fan of IP, but my big fans have no IP
17-10-06 At what stage does ‘that stray cat’ become ‘your cat’?
17-10-06 PCI-e bifurcation explained
17-10-06 The NVME now goes to 11: Asus m.2 x16 installed
17-10-01 The curious case of the Vorke Z1, Plex, and the status bar
17-10-01 The home hacking arsenal gets a new tool
17-09-29 Old School Surveillance?
17-09-27 Immunising for security? How to create herd immunity for spear-phishing
17-09-26 USB-C portable monitor and Linux play (mostly) nice
17-09-26 Identity theft and safety in numbers. Poe’s purloined letter applications.
17-09-26 Storage expansion: method chosen, input discarded
17-09-18 The beast of the basement gets more storage
17-09-16 After 25 years, my old friend is gone
17-09-10 An automatic hallway light the complex way: zigbee + wifi + python + google translate
17-09-09 How to securely run multiple external services in your single public IP home
17-09-04 Automating a garage door
17-09-03 Flashlight repair
17-08-26 Enabling TLS1.3
17-08-25 Robot vacuums: maps, security
17-08-25 The internet of things: the enemy is me!
17-08-25 API’s: is there anything they can’t do?
17-08-18 IoT vacuum update: it didn’t kill me in my sleep!
17-08-17 IOT madness: will it suck?
17-05-14 IoT madness: Xiaomi gateway
17-03-26 I’m still the enemy in the Internet of Things security, but I now have more reasons
17-01-27 Harden a home: how hard!
17-01-08 Do you remember when electricity was a little less smart?
17-01-04 I’ve found the 1 Internet of Things wifi-enabled gadget even I won’t buy!

2016 (11)

16-12-21 Anova sous-vide: its worse
16-12-21 Guess this stream burn my house down
16-11-11 Home servers: free can be expensive, TSC scaling
16-11-06 bad passwords and skype spam: a simple risk reduction technique
16-11-06 IoT: Its like Maximum Overdrive without the AC/DC
16-10-24 The Sisyphean Circus of Security Sux: rowhammer and drammer
16-10-02 WiFi: going from good to great is very hard
16-07-01 Guess a MAC, change a light switch
16-06-12 Goodbye tunnel broker, hello dual stack ipv6
16-06-10 Red carpet blackhole network impairments
16-06-05 Home (network) security: it’s hard

2015 (6)

15-11-08 Stealing a CPU: how to tell how oversubscribed your cloud is
15-08-19 Snakes on a plane?
15-08-19 TIL there’s a popular drink in Turkey that is near poison
15-07-15 SamKnows weather report
15-07-07 SamKnows, latency test
15-05-06 How fast & bad is your internet connection: redux

2014 (1)

14-05-17 Enabling VT-X virtualizaton on Dell, the ‘fun’ way

2013 (41)

13-11-20 Matryoshka and kvm: simplifying development with nested VM
13-10-17 There is a campaign to get Timur to update rom for N7 2013
13-09-01 More notes on USB OTG charging Nexus 7 (2013)
13-08-31 more battery charging
13-08-29 Even more OTG charging
13-08-28 More on the charging USB OTG Nexus 7
13-08-26 USB OTG charging Nexus 7 (2013) flo: some success!
13-08-26 USB OTG power, take 2
13-08-05 Graphing bandwidth of a pcap file on arbitrary granularity
13-08-04 Wiring for dash
13-08-03 USB OTG Charging, Nexus 7 Flo (2013)
13-08-02 Starting on the Nexus 7 build etc
13-08-01 Switched horses, working on nexus 7 in dash
13-03-31 more on builtin bluetooth
13-03-31 NAND layout
13-03-31 microphone routing: off by default
13-03-31 Google Play Music and the tiny internal sdcard: move the cache
13-03-31 Television tuner
13-03-31 SL-8268 bluetooth tether to phone
13-03-31 More bluetooth…
13-03-31 Image to root SL-8268
13-03-31 Alsa defaults SL-8268
13-03-30 Inserting bluetooth usb is not reliable
13-03-30 more on bluetooth
13-03-30 ok rooted, now having some bluetooth issues
13-03-30 Default mounts
13-03-30 processor is TCC8801
13-03-30 SL-8268 stock kernel config
13-03-30 SL-8268 mtd information
13-03-30 SL-8268 IO information
13-03-30 SL-8268 meminfo
13-03-30 loaded modules
13-03-30 Information on /proc/yaffs and /proc/yaffs_stats
13-03-29 Hmm, so its not freescale, its telechips
13-03-29 Display is AT070TN93 by Innolux
13-03-29 dmesg output of stock
13-03-29 More versions
13-03-29 TV Versions etc
13-03-27 Preparing to build the kernel
13-03-25 Disassembling to find the radio
13-03-25 Adventures with a 2-din android

2012 (1)

12-05-03 more latency than a telegraph: your mobile network @ work

2011 (1)

11-10-26 2d bar codes: mobile takes to the tabletop

2010 (3)

10-08-24 p2p == philadendron to philadendron?
10-04-18 World finger derby
10-02-08 the internet’s asymptote and shannon

2009 (1)

09-12-16 Everybody drop your pencils at 10am

2008 (1)

08-12-01 The speed of light and human (great) expectations