News for hackers. Stuff that matters.

imduffy15

Re:Pulling images from private registries with KEP-4412 on Thursday June 19, 2025 @06:45PM (#44323221)
Absolutely loving the functionality KEP-4412 brings to kubernetes.

Having the pods service account token passed to the credential provider allows for seamless authentication with private registries.

Before you either had to use the node identity which in some cases isn’t oidc based or create a bunch of imagePullSecrets.

Code and walkthrough at https://github.com/cloudsmith-io/cloudsmith-kubernetes-crede...

I could use a vpn but I already pay for my broadband connection and shouldn’t have too.
Not a solution for shared multi factor auth but maybe some ideas…

- the root account should not be used. Disable it from being able to do anything with an SCP

- new accounts created with aws organisations by default have a random password and no mfa. Access is granted by going through the password reset process. Switch to this process for existing accounts, randomise all the passwords, grant break glass access via password resetting (ensure your contact details are valid). The password reset typically requires access to the email account (make it accessible via SSO) and potentially a phone call, ensure a virtual phone number is used and root holders can point it at their phone.

- use the likes of azure ad, keycloak or okta to store your organisations identities. Require MFA on them via yubikey. Enable access to multiple aws accounts via aws sso.

- for ssh access switch to using aws ssm.

Re:Tech layoffs keep stacking up on Friday July 01, 2022 @09:19PM (#31955090)
Sad, frustrated, bitter & angry to have been apart of this. Started the job on April 4th, casual 1:1 with my manager on May 26th turned into HR stating it’s over. Not even one months severance as a good will gesture.

Why does bad planning on your part need to result in stress, anxiety, and financial concern for me?

The market is thankfully in a good place and I’m good at what I do. Did atleast one interview activity with 20+ places, it was hell, busier than a average work day. To get to final around it took 6-8 hours of interview activities.

It would be amazing to see companies that are struggling to hire to create a fast tracked interview process for those laid off.

My bet is you could remove the user. Do some DNS messing about either on your router or hosts file to drop all communications to goguardian and then resign into your sons account.

The end result will be that the school management scripts will still run but they’ll be unable to fetch and install goguardian.

Re:House Alarm system armed from a toothbrush on Thursday November 19, 2020 @07:42PM (#25156192)
Before someone claims its fake, here's a bit of detail about what happened behind the scenes https://twitter.com/imduffy15/status/1329575923310604295
Re:Turn article web pages into structured data on Friday June 26, 2020 @11:45AM (#23653282)
checkout https://info.scrapinghub.com/en/in-depth-analysis-and-evalua... to see how it compares with Diffbot, newspaper3k, readability-lxml, dragnet, boilerpipe and html-text.
Re:Lighting controlled by a OralB Bluetooth toothbrush on Sunday May 03, 2020 @10:35AM (#23059240)
The demod used case is a silly one that makes zero sense, but instead of asking why, think, what else is possible.

For most peoeple the act of brushing their teeth marks waking up or going to bed.

With such data exposed and combined with timing data you could trigger morning or night time routines. For example, the toothbrush transitioning from running -> idle after 8pm and before 4am could cause the bedroom to go into sleep lighting (gold at 40% fading out over 15 minutes), all other lights to be turned off, all smart plugs turned off, house alarm set to armed, heating turned off and so on..... or I could just continue to be silly and turn it into a TV controller https://twitter.com/imduffy15/status/1256954852996939777

Re:Lighting controlled by a OralB Bluetooth toothbrush on Sunday May 03, 2020 @10:27AM (#23059183)
Code can be seen on this commit https://github.com/imduffy15/esphome/commit/90c3cb62b37e9ce3... there are likely bugs :D
Re:Lighting controlled by a OralB Bluetooth toothbrush on Sunday May 03, 2020 @10:21AM (#23059142)
Can help fill in some of the blanks for you. The toothbrush has bluetooth. Its bluetooth advertisement contains information about its operating state (running, idle, etc.), mode (brush, daily clean, etc.), pressure and some other things. The ESP32 chip scans bluetooth, detectes these advertisements, parses them and extras the data. It then sends it over to home-assistant.io which can use the data to trigger actions on any other connected device.
There are AI solutions that can work on the HTML and manage to avoid the ads. Checkout https://blog.scrapinghub.com/extracting-clean-article-html-w...
Re:Cloudflare silently deleted my DNS records on Monday February 24, 2020 @06:30PM (#22409514)
I hate this paid support model. I don’t want to have to pay to tell a company I think they screwed up.
https://scrapinghub.com/autoextract may help you with this, it will provide the article in a structured form which you can then diff.

Older »