Chasersystems

Three variations on subversive use of DNS by the Agent are documented in Hugging Face's technical writeup of the July 2026 security incident involving OpenAI models. In this article, I discuss what each of these three types of DNS workarounds achieve in p

Introduction The increasing prevalence of AI-powered tools has redefined software development. Like many others, we wanted to adopt these tools to enhance productivity and keep up with an evolving landscape. However, the integration of codebases, cloud se

Welcome Wildcards! From v2.8.0, DiscrimiNAT OTF supports use of wildcards in an FQDN allowlist. Last updated: January 10, 2025 to incorporate v2.9.0 improvements tipIf you're in an operations role (SRE, DevOps, etc) the Operation section will be of partic

Data on CRL availability, number of entries, expiry & refresh times, etc. from various x509 leaf server SSL certificates. In light of Let's Encrypt announcing their Intent to End OCSP Service in favour of Certificate Revocation Lists (CRLs), we assembled

Last updated: June 16, 2024 In cases where inspection of domain names in TLS connections is acceptable and desirable (such as in enterprise environments), TLS Encrypted ClientHello in Google Chrome can be disabled. PowerShell tl;dr $PATH = "HKLM:SoftwareP

Step-by-step guidance for upgrading legacy TLS clients and servers while filtering outbound traffic with DiscrimiNAT OTF.

Step-by-step guidance for upgrading legacy TLS clients and servers while filtering outbound traffic with DiscrimiNAT OTF.

lieIt's actually 5 less problems. But that wouldn't have made a catchy title. DiscrimiNAT OTF now integrates with AWS' Gateway Load Balancer. Deploying this version alleviates five distinct problems. Exfiltration and Command & Control TTPs Discovery and m

learningTest driving the Log4Shell vulnerability with various versions of Java and observing the network egress connections Log4Shell in a nutshell An attacker is able to conduct a completely unauthenticated Remote Code Execution on a publicly-exposed ser

learningIdentify and protect GitHub Actions' permissible network egress, with leak detection Story of pipeline nobody would like to see develop a leak. It runs in a self-hosted GitHub Actions Runner, spun up on AWS spot instances by philips-labs' terrafor