iiinova — where your digital self keeps evolving

Reposted by Gynvael Coldwind

hackArcana @hackarcana.bsky.social · 22/09/2026

- Practical demo in a Kubernetes® lab environment - Q&A - September 23, 7 PM CEST - Free, online, in English 👉 Register here: hackarcana.com/webinar-secu...

011

Gynvael Coldwind @gynvael.bsky.social · 22/09/2026

Want to see some Kubernetes hacking in action? We're hosting an amazing webinar tomorrow at hackArcana with two of our top instructors - Jarosław Jedynak and Michał Leszczyński. Join us at: hackarcana.com/workshop-ses...

000

Gynvael Coldwind @gynvael.bsky.social · 18/09/2026

I'm thinking of doing another edition of Mastering Binary Files course. For now I'm checking if there's interest, so if you want to learn how to use hexeditors and deal with undocumented binary file formats, add your email here to express interest: hackarcana.com/mbf

011

Gynvael Coldwind @gynvael.bsky.social · 07/08/2026

Do you know the Paged Out! zine? Do you enjoy it? If so, consider supporting it on www.patreon.com/c/PagedOut - we're trying to get the project out of the red and we're really close to it! At the same time a huge shout out to everyone who already became Paged Out!'s patron :)

patreon.com

Paged Out! zine — A free deeply technical computer magazine

010

Gynvael Coldwind @gynvael.bsky.social · 06/08/2026

An exercise in translating Abstract Syntax Tree back to Python source code: www.youtube.com/watch?v=iztS...

youtube.com

Translating AST back to Python

YouTube video by GynvaelEN

021

Reposted by Gynvael Coldwind

Paged Out! @pagedout.bsky.social · 30/07/2026

This wonderful wallpaper and the Issue #9 cover were created by Vasyl/Joker^NAH^TRSI. Both this and other wallpapers, as well as Issue #9 which just came out, can be downloaded from Paged Out!'s website!

043

Gynvael Coldwind @gynvael.bsky.social · 28/07/2026

hackarcana.com/py-summer ← Tomorrow is the first day of my advanced Python workshop - you should consider signing up if you like Python, but never found the time to dig beneath the surface :)

hackarcana.com

hackArcana

022

Gynvael Coldwind @gynvael.bsky.social · 27/07/2026

Issue #9 of the free @pagedout.bsky.social zine is here! 90 pages of pure technical awesomeness! Please help spread the news ❤️ Web: pagedout.institute/webview.php?... PDF: pagedout.institute/download/Pag... Wallpaper: pagedout.institute/download/Pag... Patreon: www.patreon.com/cw/PagedOut Enjoy!

pagedout.institute

Paged Out!

Deeply technical zine. And it's free.

0146

Gynvael Coldwind @gynvael.bsky.social · 21/07/2026

My advanced-and-fun-parts-of-Python workshop starts next week! If you like Python, don't miss out :) Also, I really like this ad which will go into the next Paged Out! issue, so I'm sharing it as well ;)

000

Gynvael Coldwind @gynvael.bsky.social · 08/07/2026

hackarcana.com/py-summer Last day of my summer workshop's pre-sale (afterwards the price goes up a bit). If you enjoy Python, this is one you don't want to miss!

000

Gynvael Coldwind @gynvael.bsky.social · 07/07/2026

I've posted a new Python/CTF story! Whatever .get()'s you the flag hackarcana.com/article/what... Enjoy!

031

Gynvael Coldwind @gynvael.bsky.social · 03/07/2026

I was invited to give an interview at the Woman In Red podcast! Join us at www.twitch.tv/womaninredpr... in ~52 minutes (or watch it later at www.youtube.com/@womaninredp...). Should be fun!

twitch.tv

womaninredpresents - Twitch

Welcome to my channel! I'm Dorota Kozlowska, aka Woman in Red, and I'm passionate about sharing the art of penetration testing with kindness. You will feel as if Bob Ross was alive and a hacker. | Int...

000

Gynvael Coldwind @gynvael.bsky.social · 02/07/2026

After finalizing some other workshops I finally will have some time to add the missing details to my Python Cyber Summer Camp. Meaning: If you want to get a ticket in a lower pre-sale price, there isn't too much time left. You can find it on hackArcana's website btw (see also: this image)

100

Gynvael Coldwind @gynvael.bsky.social · 25/06/2026

AREA41 just published the recording from my pretty unusual talk: "Hacker Goes Speedrunning: Beating A 25 Hour Game In Under 2 Minutes" www.youtube.com/watch?v=OkL6... Enjoy!

youtube.com

Hacker Goes Speedrunning: Beating A 25 Hour Game In Under 2 Minutes - Gynvael Coldwind

YouTube video by DEFCON Switzerland

021

Gynvael Coldwind @gynvael.bsky.social · 16/06/2026

If you're at AREA41 in Zurich this week, be sure to say Hi! I will be around both days of the conference :)

230

Gynvael Coldwind @gynvael.bsky.social · 05/06/2026

New video about TOP 5 of my favorite things in UNICODE: youtu.be/OqonHO_Hsdo

youtu.be

TOP 5 Unicode Tricks

YouTube video by GynvaelEN

031

Reposted by Gynvael Coldwind

oshogbo//vx @oshogbo.bsky.social · 04/06/2026

My 88th blog post, a number considered lucky in many parts of Asia, was featured in the latest #BSDNow episode. The twist? It was covered in episode 666. 😈 Coincidence? 🤔 www.bsdnow.tv/666

bsdnow.tv

Everyone gets an LPE

fatgid, why zfs is ideal for media production, the CTF scene is dead, private repo behind TLS, and more...

032

Gynvael Coldwind @gynvael.bsky.social · 03/06/2026

A quick note to folks who are considering attending our Kubernetes security workshop - we might end sales early, so please don't wait until the last minute. If you know it might take you a bit longer to secure funding, let me know and we'll figure something out :)

110

Gynvael Coldwind @gynvael.bsky.social · 02/06/2026

I've posted a new video about a specific variant of Open Redirect, that I think is the most problematic one, up to the point of actually being a vulnerability: www.youtube.com/watch?v=eTde...

youtube.com

The only Open Redirect that scares me

YouTube video by GynvaelEN

130

Gynvael Coldwind @gynvael.bsky.social · 29/05/2026

I'm thinking of doing an in-depth Python summer camp? (online live workshop, in English). If you're potentially interested, please add your email to the list: hackarcana.com/summer-pytho... (it's just so I can measure interest and have a way to let you know once more info is up).

hackarcana.com

001

Gynvael Coldwind @gynvael.bsky.social · 21/05/2026

There was this gem of a challenge on Google Beginners Quest 2025 - it's just 50 lines of code, but one can learn a lot from it: www.youtube.com/watch?v=V2HS...

youtube.com

The Perfect Beginner CTF Challenge

YouTube video by GynvaelEN

130

Gynvael Coldwind @gynvael.bsky.social · 19/05/2026

I haven't uploaded stuff to my YT for some time, but I've recorded a couple of videos yesterday. Here's the first one, which is on how to start with the time-limited K8s CTF challenges we have on hA: youtu.be/XFncTjtAtVA (second one will be about a different CTF task form BQ)

youtu.be

Time Limited K8s CTF (and How To Start)

YouTube video by GynvaelEN

010

Gynvael Coldwind @gynvael.bsky.social · 18/05/2026

Super happy to announce we've listed the first workshop done by external experts at my educational site! hackarcana.com/workshop-list If you need to secure Kubernetes or want to learn how to assess its security - hands on! - you got to check this out.

020

Gynvael Coldwind @gynvael.bsky.social · 14/05/2026

Interested in getting to know some cybersecurity arcana? We're doing a livestream today with a misconfigured Kubernetes getting hacked :) Access is granted, but you have to register... or get the link another way ;) hackarcana.com/challenge/20...

hackarcana.com

hackArcana

000

Gynvael Coldwind @gynvael.bsky.social · 08/05/2026

[Good read for a lazy Friday] 0.1 + 0.2 is not 0.3. Yes, yes, everyone in programming knows this - it's these damn floats again! But what are the exact reasons? Since I love floats, I've reworked an answer I've recently given into an article that dives deep into this: hackarcana.com/article/floa...

031

Gynvael Coldwind @gynvael.bsky.social · 29/04/2026

Quite a lot of folks already finished our mini-CTF - congratz :)

000

Gynvael Coldwind @gynvael.bsky.social · 23/04/2026

We're running a small challenge next week on my edu site. We actually got 2 amazing k8s sec experts who made mini-quest-CTF (3 challs chained). The setup for this is an engineering marvel - probably it's more complex than we've done on any other CTFs. Anyway, Apr 29th, 6pm CEST.

031

Gynvael Coldwind @gynvael.bsky.social · 16/04/2026

Hey folks! We're running a 2-3 challenge K8s-themed mini-CTF. It's both for fun, but also to test our infra before the upcoming workshops on security of K8s. Anyway, it starts April 29, so sign up if you want to hack some Kubernetes :)

271

Reposted by Gynvael Coldwind

CONFidence Conference @confidenceconf.bsky.social · 15/04/2026

A 25-hour RPG finished in under 2 minutes. Not speedrunning - hacking. @gynvael.bsky.social breaks the game using reverse engineering, bugs, and his uncanny skills. #CONFidenceConf 2026 👉 bit.ly/joinCONFI2026

032

Gynvael Coldwind @gynvael.bsky.social · 09/04/2026

When working with computers we frequently find these cool little tidbits/tricks/tips we could share. They are too small to make a full article, but they are likely the right size for Paged Out! magazine, where each article is just 1 page 😎 CFP deadline for Issue #9: 30th April'26

273

Gynvael Coldwind @gynvael.bsky.social · 07/04/2026

This article reminded me of a GOATed FPGA bistream RE task from GoogleCTF - GPURTL by Robin - where the key to solving it for me was observing the pattern of changing bits in FPGA's registers. LiveOverflow made a video about it - link in the reply in case you want to check it out.

121

Gynvael Coldwind @gynvael.bsky.social · 06/04/2026

www.youtube.com/watch?v=gJM9... ← my new old talk was released as a standalone; it's a fun story of how you go from being able to write '2' (0x32, 1 byte) anywhere on the FS to full RCE with admin/root privs

youtube.com

CTF In A Box ? The Weirdest NETGEAR Network Switch 2021 Exploit Chain - Gynvael Coldwind

YouTube video by GreHack

051

Gynvael Coldwind @gynvael.bsky.social · 27/03/2026

A perfect 1-page Friday reading → here's a fun article by Jacob Strieb about (ab)using <canvas> element in HTML and PNGs to get DEFLATE compression into older browsers (without reimplementing the whole thing in JS).

183

Gynvael Coldwind @gynvael.bsky.social · 24/03/2026

This 1-pager from Xusheng Li on GDB internals of how watchpoints are implemented is a delight to read! (especially that double-write behaviour false positive - I did not know about that)

182

Reposted by Gynvael Coldwind

Michal Špaček @spazef0rze.bsky.social · 16/03/2026

My favorite XSS trick when you can add only attributes (when < and > are removed from the input) is to add onfocus=alert(1) and autofocus: <input value="" onfocus="..." autofocus=""> To not create a loop, I add this.blur(), otherwise alert() steals the focus, and then the field gains it once again.

041

Gynvael Coldwind @gynvael.bsky.social · 07/03/2026

Woah! @phrack.org zine raising the bar for CFPs I see! They have an actual crack intro with music and stuff on their website now!

061

Gynvael Coldwind @gynvael.bsky.social · 06/03/2026

Paged Out! made it to RE//verse! <3

0102

Gynvael Coldwind @gynvael.bsky.social · 04/03/2026

My second article in Paged Out! #8 was about the architecture of the terminal emulator on Linux - it's a really obvious thing until you start digging into details, as usual (link to article/issue is in reply).

1115

Gynvael Coldwind @gynvael.bsky.social · 25/02/2026

My article in newest Paged Out! about everyone's favorite Python party trick: pagedout.institute/webview.php?... #python #goingtoapythonprogrammersparty #pythonprogramminglanguagethemedparty #whatispythonsis

040

Gynvael Coldwind @gynvael.bsky.social · 16/02/2026

Just got this link on my discord - www.kickstarter.com/projects/bit... - passing it along because this book looks fun!

kickstarter.com

Bootblock Rebels

The Hidden Stars of the Amiga Underground. Stories from the Amiga Cracking Scene.

042

Reposted by Gynvael Coldwind

tmp0ut @tmpout.sh · 14/01/2026

We are excited to announce the CFP for the next tmp.0ut Volume 5! tmpout.sh/blog/vol5-cf...

03218

Gynvael Coldwind @gynvael.bsky.social · 11/01/2026

A useful chart on what type to use for flags in C/C++ depending on your D&D alignment:

080

Gynvael Coldwind @gynvael.bsky.social · 30/12/2025

Glitches in games, especially used for speedrunning, are one of the most fun aspects of hacking to watch! As an example, check out this video "How Speedrunners BEAT Hollow Knight Silksong In 10 Minutes!" by Abyssoft www.youtube.com/watch?v=M6Jn...

youtube.com

How Speedrunners BEAT Hollow Knight Silksong In 10 Minutes!

YouTube video by Abyssoft

041

Gynvael Coldwind @gynvael.bsky.social · 27/12/2025

Ah Saturday morning! What a great time to... ...write a 1-page article for Paged Out! zine! Deadline is 4th Jan - just a week away. CFP: pagedout.institute?page=cfp.php

pagedout.institute

Paged Out!

Deeply technical zine. And it's free.

022

Gynvael Coldwind @gynvael.bsky.social · 09/12/2025

𝙿𝙰𝙶𝙴𝙳 𝙾𝚄𝚃! #𝟾 𝙳𝙴𝙰𝙳𝙻𝙸𝙽𝙴: 𝟺 𝙹𝚊𝚗𝚞𝚊𝚛𝚢 𝟸𝟶𝟸𝟼 𝙴𝚘𝙳 𝙴𝚘𝙰 Save the date if you're planning to write an article or showcase your digital art in the next issue of our magazine. pagedout.institute P.S. We're looking for sponsors for issue #8 as well.

pagedout.institute

Paged Out!

Deeply technical zine. And it's free.

054