Twitxy
Saved
@datosh18's profile picture
View on X

Fabian Kammel

@datosh18

Joined June 2013
106 Following 59 Followers 373 Posts

Latest posts 5

Fabian Kammel @datosh18
Writing VEX statements by hand doesn't scale.
NixOS can generate them for you: the system config is code, so "not affected" can be code too, re-checked on every build.
I've open-sourced my approach as nixos-vex (early, feedback welcome!)
blog.kammel.dev/post/nixos_vex/
blog.kammel.dev The unreasonable effectiveness of VEX in NixOS We explore why NixOS is uniquely positioned to implement a scalable process for vulnerability management.
Fabian Kammel @datosh18
A security risk labeled "insecure" surviving 8 years? I was reading #CoreDNS docs (as one does) and found pods insecure, a default in most #K8s clusters. I raised it with #SIGSecurity, but also built a chain that breaks #Cilium FQDN policies: blog.kammel.dev/post/kubernete…
blog.kammel.dev Kubernetes' Default CoreDNS Configuration is *insecure* Discover how a default CoreDNS configuration left over for backward compatibility can allow attackers to completely bypass Cilium network policies.
Fabian Kammel @datosh18
How did you get started with open source?
For me, it always starts with becoming a user first. By using the software, you're more likely to stumble upon bugs, missing features, or areas for improvement—perfect starting points for your first contribution!
datosh.github.io/post/contribut…
datosh.github.io Getting started with open source: Making my first contribution to Hugo. Lots of people ask for advice on how to get started in open source.
Fabian Kammel @datosh18
I'm excited to share some groundbreaking research that @wakewarduk and I have been working on. We've discovered a significant vulnerability in #VSCode that allows malicious extensions to steal secrets from other extensions.
control-plane.io/posts/abusing-…
control-plane.io Abusing VSCode: From Malicious Extensions to Stolen Credentials (Part 1) Attack paths for remotely compromising Visual Studio Code
Fabian Kammel @datosh18
Just came out of a deep rabbit hole after wondering: “Why does my laptop get hot watching YouTube?"
In case you want to find answer to questions you never had about hardware acceleration and Intel iGPUs on Linux: datosh.github.io/post/hardware_…
datosh.github.io Make Chrome go brrrrrr.... Everything started with a simple question: “Why does my laptop get hot watching YouTube?”, and led to a rabbit hole of hardware acceleration, Chrome flags, and Intel iGPU monitors.