iiinova — where your digital self keeps evolving

Mark Manning @antitree.com · 03/08/2026

Heading to DEFCON. Couldn't find anyone that made this so I wrote it: A flipper zero NFC canary: keep it in your pocket or bag to keep track and alarm when someone tries to scan your gear while you're walking around the con. github.com/antitree/nfc...

0101

Mark Manning @antitree.com · 04/06/2026

Tomorrow is my last day at @chainguard.bsky.social Best company ever. I may kick myself for leaving but I will definitely kick myself if I don't try out the next opportunity. I've been a fan of this company from its inception. Marketing to 4-10 year olds in my neighborhood since 2023

010

Mark Manning @antitree.com · 07/03/2026

A quick video of the current home of Rochester 2600. Thanks to Forrest. Not shown here: The earthquake button that simulates what it would be like working for a tech company in San Francisco.

000

Mark Manning @antitree.com · 11/12/2025

All the AI in the world and Google's cameras still think snow is someone walking

120

Mark Manning @antitree.com · 26/11/2025

I'm a sucker for books that support my belief that we're all doing infosec poorly or just for the sake of infosec. This has been an interesting read so far

030

Mark Manning @antitree.com · 21/11/2025

Uh oh. Check your GCP Cloud Run jobs.

21910

Mark Manning @antitree.com · 04/10/2025

This was 2600 meeting last night. It's getting overwhelming when you look closely

010

Mark Manning @antitree.com · 24/08/2025

An answer to everyone's question: "What if a Linux syscall was an anthropomorphic action figure?"

010

Mark Manning @antitree.com · 10/08/2025

Nothing beats getting out for a run in Vegas before sphererise. #defcon

040

Mark Manning @antitree.com · 08/08/2025

Catching @bouncyhat.bsky.social 's talk in track 4. Pretty excited

010

Mark Manning @antitree.com · 08/06/2025

All I can say is I worked very hard to angle myself into a position to receive one of these today. Thanks @bsidesbuffalo.bsky.social

080

Mark Manning @antitree.com · 07/06/2025

Just a Friday night with containers, seccomp profiles, and LLMs at @roc2600.bsky.social

000

Mark Manning @antitree.com · 09/05/2025

Going back to CVE-2019-5736 for a true container 0day for a demo at @bsidesbuffalo.bsky.social next month. Seccomp will save us right?

011

Mark Manning @antitree.com · 19/04/2025

It was a great week at @chainguard.bsky.social when I found out I work with the person that wrote Crane and he pointed me at some fun registry security hints. Here's a preview of an update I'm working on to autodiscover whiteout files in registry images

130

Mark Manning @antitree.com · 19/03/2025

Here are my slides from @bsidesreykjavik.com. * Backdooring a container image (Vault) * Exfiltrate secrets via DNS * Update to pillage registry tool (originally created by Josh Makinen) www.canva.com/design/DAGgr...

142

Mark Manning @antitree.com · 19/03/2025

Excited to be at @bsidesreykjavik.com. I have some guilt that I am missing my hometown B-Sides ROC for the first time ever though which is also today but I can't resist Iceland.

061

Mark Manning @antitree.com · 18/03/2025

As expected, Reykjavik is still pretty cool. My @bsidesreykjavik.com is tomorrow morning bright and early so laying low tonight and appreciating the scenery

020

Mark Manning @antitree.com · 17/03/2025

Idk how many people I've shown K9s to now but everyone has the same reaction - what is that and give it to me! I wish I had time to hack in some of the cool Chainguard debugging tools though

010

Mark Manning @antitree.com · 13/01/2025

My prize possession. A gift from @neutrino.bsky.social who is adding 3d printing to his list of expertises

170

Mark Manning @antitree.com · 11/01/2025

Quick preview of my seccomp tool for containers that I'll be presenting tomorrow at #shmoocon

060

Mark Manning @antitree.com · 01/01/2025

How I brought in 2025. Happy new year! See you at Shmoo.

161

Mark Manning @antitree.com · 13/12/2024

Years ago I built this custom magnetic poetry set to come up with future vulnerability names. Anyone interested in a pack?

020

Mark Manning @antitree.com · 12/11/2024

I just learned that part of the XZ incident, the attacker disabled Landlock, thE application sandboxing LSM (that I keep hoping grabs more use cases) 1. I didn't think Landlock was that widely adopted at the app level 2. Surprised that XZ could meaningfully use it for such a low level function

010

Mark Manning @antitree.com · 08/11/2024

I don't always buy lock picks IRL but when I do, it's from an unmarked warehouse that only accepts cash. 10/10, loved visiting Peterson Manufacturing in Rochester today for a local pickup.

010

Mark Manning @antitree.com · 29/10/2024

Rochester 2600 meeting this week. See you at 7pm on Friday at RIT for another interesting set of discussions for nerds and non-nerds a like. www.rochester2600.com/meetings/202...

021