iiinova — where your digital self keeps evolving

Mark Manning @antitree.com · 06/09/2026

I've been spending most of my time lately researching sandboxing areas and I wrote up what I think is interesting about Firecracker, seccomp and how it has an io_uring bypass if seccomp were to ever be the last line of defense during a breakout. www.antitree.com/2026/09/fire...

antitree.com

Firecracker, io_uring and validating layers of defense · ANTITREE

posts and projects

040

Mark Manning @antitree.com · 03/08/2026

Heading to DEFCON. Couldn't find anyone that made this so I wrote it: A flipper zero NFC canary: keep it in your pocket or bag to keep track and alarm when someone tries to scan your gear while you're walking around the con. github.com/antitree/nfc...

0101

Mark Manning @antitree.com · 08/07/2026

And so it begins. Wish me luck

040

Mark Manning @antitree.com · 18/06/2026

Few days away from leaving for #toorcamp I'm going to post on a few platforms and see which gets the most hits. I'm super nervous the answer is going to be "meet us at 40m"

020

Mark Manning @antitree.com · 14/06/2026

k8s security training. People asking me what they should do to learn about kubernetes security well here you go.

020

Mark Manning @antitree.com · 04/06/2026

Tomorrow is my last day at @chainguard.bsky.social Best company ever. I may kick myself for leaving but I will definitely kick myself if I don't try out the next opportunity. I've been a fan of this company from its inception. Marketing to 4-10 year olds in my neighborhood since 2023

010

Mark Manning @antitree.com · 24/04/2026

No judgement but if you eat out of anything labelled a "carton", you might be stress eating and I'm with you.

010

Reposted by Mark Manning

Nicole Schwartz @circuitswan.bsky.social · 15/04/2026

Skytalks will be at BSidesLV again in 2026 CFP callforpapers.bsideslv.org/cfp is open and ends May 8th! You will be required to create an account to submit a CFP If you plan to submit anonymously, please at a minimum use a new browser window, and a new email address and fake name. #CFP

callforpapers.bsideslv.org

CFP

031

Mark Manning @antitree.com · 05/04/2026

Idk how many times I've installed Obsidian at this point. I think at least 25. Only to uninstall no more than 5 days later.

010

Mark Manning @antitree.com · 05/04/2026

I'd rather see a heads up to ham fisted amateurs like me to just not.

000

Mark Manning @antitree.com · 21/03/2026

I get very frustrated when feel like I can see a really different future of infosec and yet at the same time I'm fiddling with legacy paradigms and old thinking. There are two types of security teams right now, legacy and forward looking. Which teams have you seen that are turning the corner?

010

Mark Manning @antitree.com · 14/03/2026

Reminder to pay attention to all those things calling themselves a sandbox. Especially looking at you "docker sandbox".

100

Mark Manning @antitree.com · 13/03/2026

The irony that a k8s seccomp generation tool had an overly restritive seccomp policy _on itself_ causing it to crash and not generate seccomp profiles, is a fantastic example of the problem. Thanks.

140

Mark Manning @antitree.com · 12/03/2026

Yeah, but does your city have...

020

Mark Manning @antitree.com · 08/03/2026

I use a couple of investment vehicles for this. By that I mean the school buses filled with gold doubloons buried in my back yard

110

Mark Manning @antitree.com · 07/03/2026

A quick video of the current home of Rochester 2600. Thanks to Forrest. Not shown here: The earthquake button that simulates what it would be like working for a tech company in San Francisco.

000

Reposted by Mark Manning

deb kavaler @debdebdeb.bsky.social · 02/03/2026

🕯️ Par’s Memorial 🕯️ Link below. Please watch the CHAT video in the description. Rest in peace, Jason Snitker Legend. Always. youtu.be/0qMRIZWCrJw?...

youtu.be

Jason Snitker - "Parmaster" Memorial Service - Feb 28, 2026

YouTube video by Deb Kavaler Wysopal

21412

Mark Manning @antitree.com · 05/03/2026

I always exhaust myself putting together a talk and the cycles are always the same: * I have a good idea * Write out talk for idea * I hate my idea * Smash head against keyboard, write dozen new tools, hack previous slides to shambles, throw gibberish placeholders into a new deck * ... * Present

030

Mark Manning @antitree.com · 01/03/2026

Rule #608: It's handy to have a local mirror of a random swath of 3000 container images for emergencies.

010

Mark Manning @antitree.com · 01/03/2026

Also if you understand this you know it doesn't matter. 😁

000

Mark Manning @antitree.com · 28/02/2026

Seccomp container profile bypass: runc casts your seccomp's errnoRet to int16 before passing it to libseccomp. errnoRet=65536 > int16(0) > SCMP_ACT_ERRNO(0) > kernel returns 0 errors == syscall goes from blocked to allowed

110

Mark Manning @antitree.com · 28/02/2026

I need to hear this as much as anyone: In 2026, nobody will care if you were right

000

Mark Manning @antitree.com · 27/02/2026

And after all these years it still has a "banged-together-in-a-weekend" vibe which is nice that it stays true to its roots.

110

Reposted by Mark Manning

Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · 25/02/2026

NEW: For months, I’ve been working on the story of Peter Williams, the former U.S. defense contractor who stole several hacking tools and then sold them to a Russian broker. Here’s what we know about the case, what we still don’t know, and a peek behind the scenes at how I reported this story.

techcrunch.com

Inside the story of the US defense contractor who leaked hacking tools to Russia | TechCrunch

The former boss of a U.S. hacking tools maker was jailed for selling highly sensitive software exploits to a Russian broker. This is how we first learned of his arrest, reported the story, and some of...

13729

Mark Manning @antitree.com · 22/02/2026

Please submit all Cries For Help as a Jira ticket and a member of our team will triage and then ignore you within 5 business days.

010

Mark Manning @antitree.com · 21/02/2026

It's been a while since I've been working on some stuff and went "it would be even better if this had it's own domain..."

120

Mark Manning @antitree.com · 19/02/2026

I'm pretending that all the spelling mistakes I make are just to prove my doc was written by a humman

000

Mark Manning @antitree.com · 19/02/2026

My talk "Sandboxes, Seccomp, and Syscalls: Chasing Isolation in Kubernetes" was officially accepted for @BSidesSF! Pretty excited about this. See you there? sched.co/2E1hS

sched.co

BSidesSF 2026: 📕 Sandboxes, Seccomp, and Syscalls: Chas...

View more about this event at BSidesSF 2026

021

Mark Manning @antitree.com · 18/02/2026

My BSidesSF talk was accepted! I've always had a lot of respect for this con so I'm excited to be chosen. Details aren't out yet but I still get really psyched and nervous for talks like this. LFG

160

Mark Manning @antitree.com · 18/02/2026

Good morning Vitamin D deficiency. Where's the Andrew Huberman protocol for when you haven't seen the sun in 3 months and your country is collapsing. Zinc?

010

Mark Manning @antitree.com · 18/02/2026

The @bsidesbuffalo.bsky.social CFP is still open through March. You should submit that talk idea that you have. Reasons why: * It'll be an even better idea once you write it down * You're going to kick yourself in a month for not submitting * You're smarter than you think www.bsidesbuffalo.org/cfp/

bsidesbuffalo.org

CFP – BSides Buffalo

001

Reposted by Mark Manning

Wolfie Christl @wchr.bsky.social · 17/02/2026

"A security researcher has identified 287 Chrome extensions that allegedly exfiltrate browsing history data for an estimated 37.4 million installations" Recipients: data brokers like Similarweb. Roughly 1% of Chrome users affected. Just don't use extensions 😢 www.theregister.com/2026/02/11/s...

theregister.com

Security researcher finds 287 Chrome extensions leaking data

: Add-ons with 37M installs leak visited URLs to 30+ recipients, researcher says

189

Mark Manning @antitree.com · 17/02/2026

find . -name "web*" > /dev/null 😠🤜☁️

010

Mark Manning @antitree.com · 16/02/2026

I swear to god if you kids don't stop talking about Brownian Ratchets I'm turning this car around!

000

Mark Manning @antitree.com · 16/02/2026

Yep. As you know, history repeats itself so I don't consider this too different than the challenges of other multitenant untrusted workload designs. Choose Your Own Threat Model

010

Mark Manning @antitree.com · 15/02/2026

People growing their mustaches out right need to understand that you have a responsibility to have the personality of that face.

000

Mark Manning @antitree.com · 14/02/2026

Remember when people stopped caring about RSS? Turns out having an XML based way of reading articles and its metadata is a super efficient way for LLMs to read articles. I don't get very many Internet "I-told-you-so's" so all of us RSS and @feedly.com customers can take a victory lap on this one.

000

Mark Manning @antitree.com · 13/02/2026

Just remember when you decide to cargo-cult that thing from your last company, there was a reason you left that company. 😶‍🌫️

010

Mark Manning @antitree.com · 03/02/2026

I subscribed to get text alerts for Claude's status on outages... This was a mistake. How many 8's is the uptime on this thing?

001

Reposted by Mark Manning

Taggart @taggart-tech.com · 02/02/2026

Notepad++ versions and update mechanisms have been compromised since September. Please update to 8.9.1 wherever you have this tool. It's unclear what malicious versions of the tool might do. I Recommend activating incident response for affected hosts. notepad-plus-plus.or...

1173

Reposted by Mark Manning

BSides Reykjavik @bsidesreykjavik.com · 01/02/2026

The schedule for BSides Reykjavik 2026 is live at cfp.bsidesreykjavik.com/2026/schedule/ Other details at bsidesreykjavik.com. Remember tickets are still available both for the workshops and the conference.

cfp.bsidesreykjavik.com

https://cfp.bsidesreykjavik.com/2026/schedule/

[1m2026[0m Get different formats: curl https://cfp.bsidesreykjavik.com/2026/schedule/\?format=table (default) curl https://cfp.bsidesreykjavik.com/2026/schedule/\?format=list [33m2026-03-...

022

Mark Manning @antitree.com · 31/01/2026

This rush to repurpose sandbox technologies to become "AI agent boxes" is great to see. Kata is an obvious option... but layering in k8s to agentic workers is going to require another layer that needs hardening. I'm interested to see where the industry goes katacontainers.io/blog/Kata-Co...

katacontainers.io

Kata Containers

Kata Containers is an open source container runtime, building lightweight virtual machines that seamlessly plug into the containers ecosystem.

020

Mark Manning @antitree.com · 24/01/2026

How are those "I don't care about privacy, I have nothing to hide" folks doing in 2026?

020