Mark Manning

All I know is none of this PHP stuff matters as much as you feel it should

Can people please send me @chainguard.bsky.social memes? I'm starting a collection

Kimi was my first cheap model I paid for but time to move on. Openrouter is my next plan. Best option?

Anyone else feel like we are playing with rocks while frontier is shooting lasers?

If you go out, does anyone else see Friday city life this way? Before a drink, and after?

I've been spending most of my time lately researching sandboxing areas and I wrote up what I think is interesting about Firecracker, seccomp and how it has an io_uring bypass if seccomp were to ever be the last line of defense during a breakout. www.antitree.com/2026/09/fire...

Heading to DEFCON. Couldn't find anyone that made this so I wrote it: A flipper zero NFC canary: keep it in your pocket or bag to keep track and alarm when someone tries to scan your gear while you're walking around the con. github.com/antitree/nfc...

And so it begins. Wish me luck

Few days away from leaving for #toorcamp I'm going to post on a few platforms and see which gets the most hits. I'm super nervous the answer is going to be "meet us at 40m"

k8s security training. People asking me what they should do to learn about kubernetes security well here you go.

Tomorrow is my last day at @chainguard.bsky.social Best company ever. I may kick myself for leaving but I will definitely kick myself if I don't try out the next opportunity. I've been a fan of this company from its inception. Marketing to 4-10 year olds in my neighborhood since 2023

No judgement but if you eat out of anything labelled a "carton", you might be stress eating and I'm with you.

Skytalks will be at BSidesLV again in 2026 CFP callforpapers.bsideslv.org/cfp is open and ends May 8th! You will be required to create an account to submit a CFP If you plan to submit anonymously, please at a minimum use a new browser window, and a new email address and fake name. #CFP

Idk how many times I've installed Obsidian at this point. I think at least 25. Only to uninstall no more than 5 days later.

I get very frustrated when feel like I can see a really different future of infosec and yet at the same time I'm fiddling with legacy paradigms and old thinking. There are two types of security teams right now, legacy and forward looking. Which teams have you seen that are turning the corner?

By the way, we just published another privilege-escalation CVE in ingress-nginx: github.com/kubernetes/k... 🚨 This will be the final, final release. Please migrate off ingress-nginx as soon as possible. 🚨

Reminder to pay attention to all those things calling themselves a sandbox. Especially looking at you "docker sandbox".

The irony that a k8s seccomp generation tool had an overly restritive seccomp policy _on itself_ causing it to crash and not generate seccomp profiles, is a fantastic example of the problem. Thanks.

Yeah, but does your city have...

A quick video of the current home of Rochester 2600. Thanks to Forrest. Not shown here: The earthquake button that simulates what it would be like working for a tech company in San Francisco.

🕯️ Par’s Memorial 🕯️ Link below. Please watch the CHAT video in the description. Rest in peace, Jason Snitker Legend. Always. youtu.be/0qMRIZWCrJw?...

I always exhaust myself putting together a talk and the cycles are always the same: * I have a good idea * Write out talk for idea * I hate my idea * Smash head against keyboard, write dozen new tools, hack previous slides to shambles, throw gibberish placeholders into a new deck * ... * Present

Rule #608: It's handy to have a local mirror of a random swath of 3000 container images for emergencies.

I need to hear this as much as anyone: In 2026, nobody will care if you were right

Present in front of 1000 people. No biggy. Present in front of the guy that wrote App Armor.

NEW: For months, I’ve been working on the story of Peter Williams, the former U.S. defense contractor who stole several hacking tools and then sold them to a Russian broker. Here’s what we know about the case, what we still don’t know, and a peek behind the scenes at how I reported this story.

Please submit all Cries For Help as a Jira ticket and a member of our team will triage and then ignore you within 5 business days.

It's been a while since I've been working on some stuff and went "it would be even better if this had it's own domain..."

I have a visceral reaction to this stuff because we are repeating history. Keep them coming. The corpus grows. github.com/beelzebub-la...

I'm pretending that all the spelling mistakes I make are just to prove my doc was written by a humman

My talk "Sandboxes, Seccomp, and Syscalls: Chasing Isolation in Kubernetes" was officially accepted for @BSidesSF! Pretty excited about this. See you there? sched.co/2E1hS

My BSidesSF talk was accepted! I've always had a lot of respect for this con so I'm excited to be chosen. Details aren't out yet but I still get really psyched and nervous for talks like this. LFG

Good morning Vitamin D deficiency. Where's the Andrew Huberman protocol for when you haven't seen the sun in 3 months and your country is collapsing. Zinc?

The @bsidesbuffalo.bsky.social CFP is still open through March. You should submit that talk idea that you have. Reasons why: * It'll be an even better idea once you write it down * You're going to kick yourself in a month for not submitting * You're smarter than you think www.bsidesbuffalo.org/cfp/

"A security researcher has identified 287 Chrome extensions that allegedly exfiltrate browsing history data for an estimated 37.4 million installations" Recipients: data brokers like Similarweb. Roughly 1% of Chrome users affected. Just don't use extensions 😢 www.theregister.com/2026/02/11/s...

Stop putting "web" in front of everything and baking it into my browser please. share.google/g1BLx3vSyC1z...

I swear to god if you kids don't stop talking about Brownian Ratchets I'm turning this car around!

Another agentic sandbox. www.reddit.com/r/netsec/s/9...

People growing their mustaches out right need to understand that you have a responsibility to have the personality of that face.

Remember when people stopped caring about RSS? Turns out having an XML based way of reading articles and its metadata is a super efficient way for LLMs to read articles. I don't get very many Internet "I-told-you-so's" so all of us RSS and @feedly.com customers can take a victory lap on this one.

Sometimes I think I like sandboxes mostly because compliance doesn't consider them an "endpoint". Not seeing an edr binary running in my process list:

Just remember when you decide to cargo-cult that thing from your last company, there was a reason you left that company. 😶‍🌫️

I subscribed to get text alerts for Claude's status on outages... This was a mistake. How many 8's is the uptime on this thing?

Notepad++ versions and update mechanisms have been compromised since September. Please update to 8.9.1 wherever you have this tool. It's unclear what malicious versions of the tool might do. I Recommend activating incident response for affected hosts. notepad-plus-plus.or...

All ya'll installing openclaw.ai on your real systems are wild. It's a cool demo of the future but ...

The schedule for BSides Reykjavik 2026 is live at cfp.bsidesreykjavik.com/2026/schedule/ Other details at bsidesreykjavik.com. Remember tickets are still available both for the workshops and the conference.

This rush to repurpose sandbox technologies to become "AI agent boxes" is great to see. Kata is an obvious option... but layering in k8s to agentic workers is going to require another layer that needs hardening. I'm interested to see where the industry goes katacontainers.io/blog/Kata-Co...

How are those "I don't care about privacy, I have nothing to hide" folks doing in 2026?