Security notes, research, and walkthroughs. 6 posts.
This is part one of a two part series on breaking into AI infrastructure. The companies are anonymized, the bugs are real, and both were fixed fast once reported. The point of writing them up is the…
So you've compromised an Active Directory environment, owned the domain controller, and dumped the NTDS.dit. Look how cool you are. Now what? Because what you're staring at is a wall of hashes: That…
You've probably seen the memes. "Anthropic lost all their source code!" "TypeScript destroyed an AI company!" Here's what actually happened, why it matters, and how you can check if you're making the…
I write a lot of markdown. READMEs, documentation, notes, blog posts. It's everywhere. And every tool I've used to edit it has the same problem: it either can't show me the rendered output, or it…
GitHub profiles tell you a lot about a person if you know where to look. But GitHub's UI is designed for browsing code, not for quickly understanding who someone is as a developer. I kept running…
When the recruiter told me the technical challenge would be a CTF with a five-day window, I laughed. "What am I going to do with the other four days?" Then they sent me the URL. I opened it in a…
Thanks for reading. — sho_luv