Exposing JWT vulnerability in Neo4J's GraphQL(v3) Auth Layer
How a few lines of missing documentation might have led to unauthorized access to thousands of apps using Firebase Auth and Neo4j's GraphQL library.
Apr 18, 20264 min read8
Command Palette
Search for a command to run...
Latest articles
Linux is Friendly - Recovering from Missing Firmware
Occasionally, we folks using Linux find our selves in situations where things break; our computers do not function as intended. In my scenario, I was out on business in another country, and my WiFi device was simply not showing up after a reboot. I k...
Jan 17, 20255 min read42
What the hell is this LLM thing?
Exploring possibilities with the power language models
Oct 8, 20248 min read139
Creating VM templates from raw disk images on Proxmox
Learning new things or building new things requires rapid prototyping. This is a guide on how to create a VM template using a raw image and LVM-Thin storage. We're using an ubuntu cloud image in this. get https://cloud-images.ubuntu.com/noble/current...
Mar 30, 20241 min read261Proxmox - Guest Network Throughput
I had a weird notion that proxmox was throttling the network throughput of guests, however today I discovered that it was only due to the CPU of the guest machine. Here's the scenario. I have a 1GBPS connection to the internet. All machines in my off...
Mar 27, 20241 min read74The eBPF -3 uprobes
A gentle introduction to userspace instrumentation
Aug 25, 20236 min read259The eBPF - 2
In this blog, we will continue with tracing. We'll aim to get a basic understanding of: How processes work Exit codes Forking of processes Exit tracepoints (of the execve() syscall) Recommended reading: If you've not read the first article, ple...
Aug 13, 20236 min read437The eBPF Series - 1
Enter God mode
Aug 10, 20235 min read283Network traffic monitoring when your cloud provider is actively working against you
I'm looking at you, Azure.
Mar 24, 20233 min read76