Experiments with Intel Arc Pro B70 on Debian 13: kernel and firmware hurdles, SYCL and Vulkan setup, ASPM, custom fan control, xpu-smi, DKMS, and what it takes to make 32 GB VRAM usable.

AI changes AppSec economics. Learn why teams need smaller stacks, stronger verification, & safe remediation.

A practical field guide to making conference panels useful by setting clearer expectations for organizers, moderators, and panelists alike everywhere.

Implementing Attack Surface Reduction in software development and architecture decisions.

Open source is generosity, not a vendor SLA. Stop treating volunteers like suppliers. Declare your support level, offer paid tiers if you want, and make users fund or fork what they depend on.

AI is making it cheap to replicate small SaaS workflows. Vendors sell suites, teams need slices, and bundling feels shakier at renewal time.

I am thrilled to announce a major update to Hacking Archives of India (HAI). My mission has always been to document the history and contributions of the Indian information security community. To better serve that mission, I have completely revamped both the looks and the internals of the website. Whether you are looking for specific tools, historical talks, or the journey of specific hackers, the new HAI is faster, cleaner, and now machine-readable. Here is a deep dive into the new features and changes you will find. 1. Visual Overhaul: Big Data, Big Cards…

Specialise in Network, Web Application, Mobile & Linux Security. I prefer defence over offense. I stay @ India (+5.30 GMT). Email : anant{at}anantshri{dot}info

Unified BOINC statistics across all projects. Search by CPID or username to view your aggregated stats and badges.

A curated list of open-source security tools that run entirely in your browser — no backend, no installation required.

Explore the latest updates in SBOMPlay v0.0.7, featuring enhanced capabilities, custom SBOM support, and improved auditing tools.

TL;DR: I built Readwise Wrapped. It gives you a Spotify Wrapped style year-in-review for your Readwise highlights. You paste your Readwise token, pick a year, and it spits out a clean, shareable, good-looking reading recap.Link:

Cyfinoid's collection of security tools and research projects including software supply chain analysis, Android assessment, cloud security, and more.

Nautilus Institute is passing the torch, will your group be the next CTF Overlords?.

Black Hat

Discover how GH Navigator and KeyChecker enhance GitHub security by providing visibility and testing for both data and control planes.

Determinism builds trust, non-determinism builds discovery. The art lies in knowing when the world needs certainty - and when it needs the unexpected gift of surprise.

Most say ‘think like a hacker,’ but infosec fights adversaries with goals, not curiosity. Real defense means blending hacker creativity with adversary realism.

My thoughts on how LLM behaviour makes me rethink my own brain’s inner workings. A prediction engine as a mirror for a mind.

Discover how 'keychecker' automates SSH key validation to enhance supply chain security for developers and defenders alike.

Cleans the LinkedIn feed based on keywords and filters. - njelich/LinkOff

Tired of tools that need Docker to read a JSON file? I built browser-native, client-side tools like SBOMPlay and 3ptracer to prove you don’t need servers, tracking, or setup. Just open index.html and go. Minimalist, secure, and surprisingly powerful.

It’s that time again : HackerSummerCamp @ Vegas 2025.This one's special for me: it's my 10th BlackHat USA. What started back in 2015 as a support trainer gig has snowballed into… well, let’s just say the badge can no longer fit all the hats I wear. Here’s how the madness unfolds this year: 📆 2nd–5th Aug 2025: BlackHat Trainings…

Vibe coding with AI feels magical until your project spirals into chaos. This guide explores how to stay grounded while building with AI tools, covering minimalism, context limits, testing, and code hygiene. A practical read for developers navigating the fine line between productivity and hallucination.

Name of Training: Attack and Defend Software Supply ChainTrainer(s): Anant ShrivastavaDates: August 11-12, 2025Time: 8:00 am to 5:00 pm PTVenue: Las Vegas Convention CenterCost: $1800 Course Description:  In today's interconnected world, software development relies heavily on third-party components---up to 80% of your

Discover SBOM Play: a user-friendly tool to visualize SBOMs with vulnerability insights and licensing analysis—no complex setup required!