Sign in

Rory McCune

@mccune.org.uk
5.8K followers 468 following 313 posts

Security geek, Containers, Kubernetes, Golang/Ruby, hillwalking Home Page :- www.mccune.org.uk Blog:- raesene.github.io

PostsRepliesMedia
Reposted by Rory McCune
Erica Windisch @ewindisch.ontological.observer · 29/09/2026
I reported vulnerabilities to the Linux kernel and OpenZFS assisted by GLM-5.2. Anthropic's cyber program and refusal responses are detrimental to global information security. Defenders depend on GLM because they can't depend on Anthropic.
023248
Reposted by Rory McCune
Dare Obasanjo @carnage4life.bsky.social · 26/09/2026
Vercel’s AI Gateway data makes it hard to argue any AI lab has a durable moat. Anthropic fell from 84% → 37% of spend while OpenAI grew from 10% → 24%. Open-weight models grew from 1% → 29%, causing over half of Anthropic’s losses. Developers are definitely in their token pinching era.
5618
Reposted by Rory McCune
Katie Martin @katie0martin.ft.com · 25/09/2026
I have blamed The agents That hacked Your website And which You probably Reasonably thought I controlled Forgive me I am rich And unaccustomed To taking responsibility
5776142098
Reposted by Rory McCune
bsidesberlin.bsky.social @bsidesberlin.bsky.social · 22/09/2026
SPEAKER SPOTLIGHT ⚡ Join us for @mccune.org.uk 's talk on post-exploitation Kubernetes persistence! "If defenders aren't watching every layer of the stack, they won't see you coming or going." 👉 Schedule & Tickets: bsides.berlin #Kubernetes #InfoSec #BSidesBerlin
061
Reposted by Rory McCune
Dungeons & Dragons Online @ddounlimited.bsky.social · 20/09/2026
Up to 75% off select Adventure Packs through Sept. 24th! 75% off The Soul Splitter, Keep on the Borderlands, The Lost Gatekeepers, Peril of the Planar Eyes, Hunter and Hunted, 50% off Grip of the Hidden Hand, Slice of Life, Fall of the Night Brigade 20% off The Dragons' Hand #DDO
022
Reposted by Rory McCune
Will Quinn @willquinnart.bsky.social · 19/09/2026
Daily bunny no.3446 is not left-handed
Bunnies re-enact the duel between Inigo and Wesley in "The Princess Bride", with a masked bunny fighting against a dashing shaggy bunny with a gold sword. The masked bunny is cornered, near the edge of a rocky cliffside, but still has a trick up his sleeve
5774361831
Rory McCune @mccune.org.uk · 18/09/2026
SAAS supply chains in a paragraph
151
Reposted by Rory McCune
bsidesberlin.bsky.social @bsidesberlin.bsky.social · 17/09/2026
The BSides Berlin schedule is LIVE! 🔥 Featuring talks from @mccune.org.uk , Alejandro Rusell, Piotr Bienias, Kolja Grassmann, Yunus Aydin, Eran Cohen, & Arad Donenfeld. ⏰ Early bird rates end TOMORROW night! Grab your tickets now: bsides.berlin #BSidesBerlin #Cybersecurity #InfoSec #BerlinTech
011
Rory McCune @mccune.org.uk · 17/09/2026
Woo 44con time!
000
Rory McCune @mccune.org.uk · 07/09/2026
@smarticu5.bsky.social finding fun new kubernetes Operator security issues
Screenshot from a kubernetes security talk showing an attack allowing privilege escalation
010
Rory McCune @mccune.org.uk · 02/09/2026
I've had the same problem with Freetrade. As of the moment their support can't even say when the tax statements will be available! Honestly don't see how it can be that complicated.
010
Rory McCune @mccune.org.uk · 31/08/2026
you're right, it needs more haggis and tattie scone, and ideally some square sausage!
000
Reposted by Rory McCune
Cloud Native Computing Foundation (CNCF) @cncf.io · 28/08/2026
Meet Marcus Noble. He's going into his fourth year as a CNCF Ambassador, and his role in the community has changed a lot since year one. #CNCFAmbassadors #CloudNative
184
Reposted by Rory McCune
Fighting Fantasy @fightingfantasy.bsky.social · 27/08/2026
#InternationalGamebookDay The Warlock of Firetop Mountain is 44 years old today! officialfightingfantasy.blogspot.com/2026/08/the-... #fightingfantasy #gamebooks #thewarlockoffiretopmountain @ian-livingstone.bsky.social
24617
Reposted by Rory McCune
METR @metr.org · 26/08/2026
METR and Redwood Research investigated agent behavior in the Hugging Face incident. We found agents developed a universal cheat for ExploitGym within 4 hours, then coordinated multi-day R&D efforts to trick the scorer into accepting cheats, including trying to tamper with logs.
646599
Reposted by Rory McCune
Marko Bevc @marko.social · 21/08/2026
This is one of my favourite events and I'm happy to be speaking again! We're back in Edinburgh 🏴󠁧󠁢󠁳󠁣󠁴󠁿 - come and say hi! It's going to be great seeing friend and spend time with the #Kubernetes #community - also still time to grab @kcduk.bsky.social Early bird tickets 🥳 Full agenda: agenda.kcduk.io
agenda.kcduk.io
KCD UK 2026 Schedule
012
Rory McCune @mccune.org.uk · 21/08/2026
I've been doing some research and writing for my upcoming Kubernetes Multi-Tenant blues talk. So I wrote a quick blog on (ab)using the API server proxy in multi-tenant clusters to bypass tenant network policy restrictions. raesene.github.io/blog/2026/08...
raesene.github.io
Using the API server proxy to bypass network policies
172
Rory McCune @mccune.org.uk · 20/08/2026
UK private companies will file accounts, which are on companies house. Smaller companies can file much more abbreviated statements that larger companies, but they'll file something.
020
Rory McCune @mccune.org.uk · 20/08/2026
If you're talking about the UK entity find-and-update.company-information.service.gov.uk/company/0870... - the 2024 numbers came out in August 2025. Usually on the company page you can see if they're overdue, so the 2025 numbers are due this september.
find-and-update.company-information.service.gov.uk
CLOUD IMPERIUM GAMES LIMITED filing history - Find and update company information - GOV.UK
CLOUD IMPERIUM GAMES LIMITED - Free company information from Companies House including registered office address, filing history, accounts, annual return, officers, charges, business activity
110
Reposted by Rory McCune
Marcus Noble @averagemarcus.bsky.social · 18/08/2026
The CFP for #KubeCon EU in 🇪🇸 Barcelona is now open! 🎉 I'm pretty sure this is going to be the largest KubeCon yet and I can't wait to see what y'all plan to talk about! Now to come up with a new talk to submit... 🤔 sessionize.com/kubecon-clou...
sessionize.com
KubeCon + CloudNativeCon Europe 2027: Call for Papers
KubeCon + CloudNativeCon gathers adopters and technologists from leading open source and cloud native communities. Join our current graduated, incubat...
052
Rory McCune @mccune.org.uk · 06/08/2026
Cool!
000
Reposted by Rory McCune
BSides London @bsideslondon.bsky.social · 01/08/2026
The #BSidesLDN2026 "No REST 'Til Hammersmith' Call for Papers, Rookies and Workshops is no official open! #Security #BSides #London #CFP
086
Reposted by Rory McCune
BSides Belfast @bsidesbelfast.bsky.social · 27/07/2026
#BsidesBelfast26 Schedule Announcement bsidesbelfast.org/2026/schedul...
033
Rory McCune @mccune.org.uk · 22/07/2026
The approach we took for this with an older relative was buy an old "dumb" TV from eBay. It works fine and doesn't have any of that complexity built-in. It is maddening though that there doesn't appear to be a modern equivalent.
120
Reposted by Rory McCune
Dungeons & Dragons Online @ddounlimited.bsky.social · 20/07/2026
SithDDO has put together a pretty amazing musical number and video about kobolds: ow.ly/qAxK50Zqb6E #DDO
141
Rory McCune @mccune.org.uk · 20/07/2026
I've been taking some time to dig in to Kubernetes' z-pages support and some of the things to know if you want to use them for debugging and configuration review. No massive revelations but I learned a thing or two while doing it, so I wrote them down :) raesene.github.io/blog/2026/07...
raesene.github.io
Show us Zee Pages
031
Rory McCune @mccune.org.uk · 20/07/2026
Following @ministraitor.bsky.social 's sterling work on getting the slides lined up, the video for my Steelcon "Talk about giving talks" is live. This is my attempt to distill my advice on giving talks based on 16 years of conference speaking experience. youtu.be/jBSANnzGjHE?...
youtu.be
A Talk About Giving Talks - Rory McCune
YouTube video by SteelCon
031
Rory McCune @mccune.org.uk · 20/07/2026
Cooper doing amazing work on videos as always! Also another good reason not to make all your slides monochrome :)
051
Reposted by Rory McCune
Dungeons & Dragons Online @ddounlimited.bsky.social · 17/07/2026
Terror of Demogorgon arrives soon! Learn more about our next expansion on DDO.com: ow.ly/Sk6s50Zp5BL #DDO
152
Rory McCune @mccune.org.uk · 16/07/2026
Quite literally :D telling an agent to go to a URL and do whatever it says, is quite the install mechanism!
excerpt from the superpowers readme for installing in Opencode where it suggests you tell opencode to open a URL and do whatever it instructs.
031
Reposted by Rory McCune
FT Alphaville @alphaville.ft.com · 15/07/2026
Ah well. as.ft.com/r/77b132dc-9...
as.ft.com
SpaceX bond yields rocket towards junk
Won’t someone think of the bondholders?
35313
Reposted by Rory McCune
Barry Dorrans @blowdart.me · 14/07/2026
Ouch. mindgard.ai/blog/cursor-...
mindgard.ai
Cursor 0day: When Full Disclosure Becomes the Only Protection Left - Mindgard
The vulnerability nobody seems interested in fixing
1125
Rory McCune @mccune.org.uk · 14/07/2026
But then the interesting follow-on question is *why* security professionals make policies like that. The answer can generally be found in the incentives and resources given to those teams. The mis-match in incentives is often a large part of the problem...
100
Rory McCune @mccune.org.uk · 12/07/2026
Starting the journey home after @steelcon.info , another great conference run by their crew.
Train going to Edinburgh
152
Reposted by Rory McCune
Ian Coldwater 🧊🚫 @lookitup.baby · 10/07/2026
FYI, this is malware. If you see this, don’t do this
2437342166
Rory McCune @mccune.org.uk · 09/07/2026
The little prop planes were part of the fun, a bit on the slow side mind.
120
Rory McCune @mccune.org.uk · 09/07/2026
Woo happy birthday! Hope it goes great
000
Rory McCune @mccune.org.uk · 09/07/2026
Sunny start for the trip to @steelcon.info
Cupar train station
020
Reposted by Rory McCune
George Monbiot @georgemonbiot.bsky.social · 08/07/2026
Poster promoting Count Binface, in the famous Obama style
18273212156
Rory McCune @mccune.org.uk · 29/06/2026
Next you'll need to break out some of these!
060
Reposted by Rory McCune
Thor Benson @thorbenson.bsky.social · 22/06/2026
"I hear you're sending me a seventh prime minister"
Larry the Cat, located at 10 Downing Street, London
9893811631
Rory McCune @mccune.org.uk · 21/06/2026
yeah we've been learning about period houses over the last year. Things like "you can't use concrete on the roof or it'll let in damp" and "the sewers are from the victorian times and get roots growing through them sometimes" have been some lessons to learn. Lovely house though!
110
Rory McCune @mccune.org.uk · 21/06/2026
Church conversions are often lovely and that's a nice one. The tricky part for me is the space doesn't seem to divide up nicely, so if you don't want a large open central space, that's tricky. Then there's the usual fun of heating older buildings. I live in an 1854 house though so I can't talk :D
210
Rory McCune @mccune.org.uk · 18/06/2026
If you want a related laugh, try looking at intrusion detection systems and how they identify things :D My very dumb (but kind of effective) bypass for container scanners was raesene.github.io/blog/2023/04...
raesene.github.io
Fun with container images - Bypassing vulnerability scanners
100
Rory McCune @mccune.org.uk · 12/06/2026
you'd hope they would but it seems disappointingly unlikely. I tried to get some Scottish gov sites to just have any other option than Twitter available for social media, to no avail.
070
Reposted by Rory McCune
Ciaran Martin @ciaranm.bsky.social · 12/06/2026
Snap www.thetimes.com/article/e895...
thetimes.com
If ministers fear X fuels disorder, they should stop using it
The government voices concern about the social media platform spreading hate but has hundreds of accounts that help make it a success
117255
Rory McCune @mccune.org.uk · 12/06/2026
bumsrake.de - This is an amusing way to do vuln. disclosure
bumsrake.de
BUMSRAKETE™ — The Most Beautiful, Most Tremendous FreeBSD Vulnerability In The History Of Computing. BELIEVE ME.
BUMSRAKETE is a HUGE, TREMENDOUS, MANY-PEOPLE-ARE-SAYING FreeBSD kTLS-RX page-cache write primitive. The BEST primitive. Some say the best ever.
020
Reposted by Rory McCune
Ian Coldwater 🧊🚫 @lookitup.baby · 11/06/2026
My loves, please stay doing your business on Signal
14789235
Rory McCune @mccune.org.uk · 11/06/2026
I wondered why I was seeing adverts for SpaceX from UK brokers all over the place. This does not seem like a good idea...
000