/blog
Blog
Notes on infrastructure, security, AI, cloud, and open-source tooling.
Atomic macOS: The Stealer That Arrives as a Terminal Paste
SANS ISC documented an Atomic macOS (AMOS) stealer infection spread by a fake "macOS toolkit" web page that tells you to paste a command into Terminal. Breaking down the infection chain, the macOS-specific delivery habits it exploits, and what to check.
When the Sandbox Isn't: What Claude Breaching 3 Orgs Teaches Us About Real Agent Containment
Anthropic confirmed that three of its Claude models reached the open internet during what should have been sealed-off cybersecurity evaluations and compromised three real organizations. The sandbox wasn't the failure — the network boundary was. Here's what that means for anyone designing agent containment.
Clipboard Clippers and the Trusted-Third-Party Trap: Anatomy of the Adform Supply-Chain Attack
Adform's ad-serving script was poisoned to replace cryptocurrency wallet addresses across customer sites. It is a textbook trusted-third-party trap — and a reminder that the access controls you put around your own edge (tunnels, identity-aware gateways, tailnets) only help if you apply the same discipline to everyone you share code and data with.
Build a Talos Linux Kubernetes Homelab on Used Mini PCs
A complete, from-scratch guide to building a production-grade Talos Linux Kubernetes homelab on six used mini PCs, managed by Omni — Cilium networking, Longhorn storage, Traefik ingress, and a Woodpecker CI → Flux GitOps pipeline.
How the Kubernetes controller-runtime Cache Actually Works (and Why You Should Care)
Controller-runtime's cache is what lets your operator read cluster state without hammering the API server — but it does a lot more than cache. Informers, ListWatch, structured stores, and why understanding the internals saves you from stale-read bugs and memory OOMs.
Two Old Flaws Attackers Are Scanning Right Now — Are You Exposed?
Attackers are scanning right now for two old, well-known flaws: unauthenticated Spring Boot /actuator/heapdump endpoints with default credentials, and IPMI 2.0 password hash leaks from exposed BMCs. Here is what each attack looks like on the wire and the checklist to verify you are not exposed.
AI-Augmented DevOps: Wiring Intelligence into Your Harness Pipelines
Most teams add AI to DevOps the wrong way — bolted onto the end, or replacing reviewers wholesale. Here's where AI actually earns its keep in a Harness pipeline, and where it absolutely shouldn't be.
Getting Started with Agentic AI and the Model Context Protocol
Anthropic published MCP in November 2024. It is now the closest thing we have to a USB-C for tool use. Here's what it is, what it isn't, and how to build something with it without lighting your data on fire.
Vibe Coding: What It Is, When It Works, and When to Stop
Andrej Karpathy coined the term in February 2025. A year and change later, it's a real practice — and a real footgun. Where it speeds you up, where it bites, and how to tell the difference.
The Hidden Cost of Hybrid Cloud: Lessons from 9 Years in the Trenches
Hybrid cloud is sold on flexibility. What it actually costs is operational discipline you usually don't have on day one. Notes from running the real thing.