Hac

I'm now part of the HTB Affiliate Program! 😊 If you use my link to buy any HTB subscription, I will earn a commission at no extra cost to you. If you prefer not to use the link, that's completely fine too. Thank you for your support! hacktheboxltd.sjv.io/Gmvygk #infosec #htb

Was checking my amazon history and last year I got a am4 motherboard and 32GB ram for 90$ usd WTFFFFFFFFFFF now the 32GB ram is going for 250USD fuckkkk

Currently testing the best way to cool my 3 v100 gpus. Also getting 2 more gpus in upcoming weeks. So need to adjust the designs. Will be sharing the files when I figure out the best design too cool multiple gpus.

Got some gpus, will be trying out strata soon, also planning to share 3d models for cooling (in a day or two) and planning to open source few projects so we can fine tune some models.

My experience with @UPS india has been extremely shit. They have no proper communication channel and you have to call them each time to get things working. You guys have no proper way to pay for customs and get confirmation. I have to call your support team multiple time on my customs payment confirmation. Since it's all manual. And It's been almost 20 days and still haven't received my package. Won't be using UPS again. Fedex is much better when it comes to communication and dealing with customs.

A few months back I was distilling from bigger public models and got the older Qwen3.6 27B pretty close to Opus 4.8 on cyber stuff. Thinking of dropping some money on local AI hardware to work on Qwen4 27B when it drops.

Yay! Got promoted at work to Manager Offensive Security & cloud research. 🥳🥳🥳

A single pod is often enough to own the cluster and the cloud account behind it. EKS IRSA, AKS Workload Identity, GKE Workload Identity. Same pattern: overprivileged service account annotation, then you are the cloud identity. Container escape gets you the node. The annotation gets you the account. pwnedlabs.io/blog/attacking-… #Kubernetes #CloudSecurity #K8s #RedTeam

GCP privilege escalation is rarely an exploit. It is an IAM chain. Low-priv identity → service account you can impersonate → project takeover. The permissions that actually matter: iam.serviceAccounts.getAccessToken iam.serviceAccounts.actAs resourcemanager.projects.setIamPolicy Token Creator does not look like access. It is access to everything the target identity can reach. Write-up: pwnedlabs.io/blog/gcp-privil…

Will resume my k8s series from today btw, Went on a short break hehe 😅

A friend and I have started backing up open-weight models. Tell us if you want any particular one saved. Fuck censorship!

Turned 19 today, getting old I guess lol 😂

I think i forgot to share this here, But I passed my CRTO exam few months back.

Day 6 of 15. RBAC is what a pod is allowed to do. Foundations done. Day 7 is the attacker’s map.

I’m doing 15 days on Kubernetes for security people what you actually need to know to attack and defend a cluster. Day 5 of 15. Every pod has an ID card. Most teams never look at it. That card is a service account token. Full article below.