Skip to content

Blog

How to get the full domain allowlist for pulling Docker images

Use crane logs to build a minimal proxy allowlist for Docker image pulls.

Read more →

December 20, 2025

How to fix Formula1 or how to make F1 even more exciting sport.

I have one idea on how to fix Formula 1. If we want racing to be more fair, we should have the same cars for every driver. So, the idea is that drivers’ points will be counted as they are now, with a certain amount of points awarded for each race and position. However, the constructor championship will not be calculated as the sum of drivers’ points in the same team.

Read more →

June 2, 2023

F5 BIG-IP iControl REST vulnerability CVE-2022-1388

Discovered F5 BIG-IP iControl REST vulnerability CVE-2022-1388 before it was published.

Read more →

May 9, 2022

How to find a vulnerable server on the internet?

Using Tor, Shodan and an nmap NSE script to show how many Citrix ADC gateways were still exposed to CVE-2019-19781 in January 2020.

Read more →

January 24, 2020

.grsec patch size_overflow

How switching an int to size_t in a grsecurity n_tty patch lets a negative value wrap into a huge one, and a quick fix.

Read more →

April 29, 2016