██████╗ ███████╗██╗   ██╗██████╗ ██╗      ██████╗  ██████╗██╗  ██╗   ██████╗ ███████╗██╗   ██╗
██╔══██╗██╔════╝██║   ██║██╔══██╗██║     ██╔═══██╗██╔════╝██║ ██╔╝   ██╔══██╗██╔════╝██║   ██║
██████╔╝█████╗  ██║   ██║██████╔╝██║     ██║   ██║██║     █████╔╝    ██║  ██║█████╗  ██║   ██║
██╔══██╗██╔══╝  ╚██╗ ██╔╝██╔══██╗██║     ██║   ██║██║     ██╔═██╗    ██║  ██║██╔══╝  ╚██╗ ██╔╝
██║  ██║███████╗ ╚████╔╝ ██████╔╝███████╗╚██████╔╝╚██████╗██║  ██╗██╗██████╔╝███████╗ ╚████╔╝ 
╚═╝  ╚═╝╚══════╝  ╚═══╝  ╚═════╝ ╚══════╝ ╚═════╝  ╚═════╝╚═╝  ╚═╝╚═╝╚═════╝ ╚══════╝  ╚═══╝  
                                                                                              

I do security stuff

Sometimes I fix things, sometimes I break things, occasionally find time to write about it. Disclosures, research notes, and the odd talk live here.

bugs
0
disclosed
research
1
articles
talks
0
presented

$ recent
research Exploiting misconfigured Google Cloud Service Accounts from GitHub Actions