iiinova — where your digital self keeps evolving

Richard Fan @richardfan.xyz · 16/03/2026

Securing #AIAagents is difficult, even if it's designed to do good things. How about an agent designed to do bad things? I tried hacking the AWS Security Agent and here is what I’ve found. #AI #AWS #CloudSecurity #CyberSecurity #AISecurity #AgenticAI blog.richardfan.xyz/2026/03/14/p...

blog.richardfan.xyz

Pentesting a pentest agent - Here’s what I’ve found in AWS Security Agent

Richard’s blogs on Cloud Security

020

Richard Fan @richardfan.xyz · 18/12/2025

#AWS introduced EC2 Instance Attestation in October I have created a demo project to showcase how we can use it to achieve verifiable software deployment 📝 Blog post: blog.richardfan.xyz/2025/12/18/w... #EC2 #NitroTPM #Cybersecurity #CloudSecurity #TEE #ZeroTrust #NitroEnclaves

blog.richardfan.xyz

What is EC2 Instance Attestation

Richard’s blogs on Cloud Security

010

Richard Fan @richardfan.xyz · 02/12/2025

25 announcements in 10 minutes #AWSreInvent

000

Richard Fan @richardfan.xyz · 02/12/2025

Running Gemini on Amazon Bedrock #AWSreInvent

000

Reposted by Richard Fan

Mike Fiedler @miketheman.com · 26/11/2025

There's a nasty #OpenSource #SupplyChain worm going around named Shai-Hulud. It's also capable of exposing some projects' long-lived PyPI API Tokens. Read more on what's happening, and what you can do to protect your projects. TL,DR: Adopt Trusted Publishing 🔐🚀📦 blog.pypi.org/posts/2025-1...

blog.pypi.org

PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats - The Python Package Index Blog

Shai-Hulud is a great worm, not yet a snake. Attack on npm ecosystem may have implications for PyPI.

12517

Richard Fan @richardfan.xyz · 25/11/2025

I can't overstate how significant the new #AWS Organization Inspector policy is 🔗 Example code: gist.github.com/richardfan11... With a simple terraform stack, we can enable Amazon Inspector in all accounts, in all regions 📝 More example policy: docs.aws.amazon.com/organization... #CloudSecurity

gist.github.com

A terraform stack to enable Amazon Inspector in all AWS accounts in all regions

A terraform stack to enable Amazon Inspector in all AWS accounts in all regions - enable-amazon-inspector.tf

010

Richard Fan @richardfan.xyz · 20/11/2025

This is my most favourite announcement so far: #AWS issued-JWT 🔗 docs.aws.amazon.com/IAM/latest/U... With sts:GetWebIdentityToken, we can now request JWT from AWS, with context inside that can be logged by external service. #AWSCloud #Security #CloudSecurity #CloudSecurity #IAM #OIDC

010

Richard Fan @richardfan.xyz · 17/11/2025

There is an upcoming change on #GitHubActions Pull Request workflow starting from Dec 8 Let me explain what's going on and how you can check if your workflow is affected 👉 blog.richardfan.xyz/2025/11/17/g... #GitHub #Security #CloudSecurity #CICD #DevOps

blog.richardfan.xyz

Breaking change on GitHub Actions pull_request_target

Richard’s blogs on Cloud Security

020

Richard Fan @richardfan.xyz · 27/10/2025

Can anyone tell me what is the difference between this M365 Copilot app and the Excel app? If the Copilot app have all the full Word, Excel and Powerpoint feature, then why I need to install 3 more apps? #Microsoft #MicrosoftOffice #MicrosoftM365 #M365 #Copilot #MicrosoftCopilot

020

Richard Fan @richardfan.xyz · 26/10/2025

The mysterious YouTube algorithm brought me to yet another niche video This time, it's "Why you can't go faster than light" But surprisingly, this channel gave me the most intuitive explanation ever to this question 😄 youtu.be/Vitf8YaVXhc?...

youtu.be

I never understood why you can't go faster than light - until now!

YouTube video by FloatHeadPhysics

000

Richard Fan @richardfan.xyz · 22/10/2025

I always hear news reporters say “QUOTE” when quoting someone But I seldom hear them say “unquote” So when do the quotes end? An I the only one wondering?

000

Richard Fan @richardfan.xyz · 20/10/2025

Good luck to anyone hosting #aws identity center in us-east-1

000

Richard Fan @richardfan.xyz · 04/10/2025

Session reservation for #AWSreInvent is opening soon, still struggling to plan your schedule among 2000+ sessions? Use this planner made by @raphaelmanke.bsky.social to discover sessions you are interested in. 👉Link: reinvent-planner.cloud #AWS #AWSCommunity #TechConference

reinvent-planner.cloud

Unofficial AWS re:Invent Session Planner 2025

Easily browse sessions, create a personalized schedule, and get recommendations to make the most of your AWS re:Invent experience.

010

Richard Fan @richardfan.xyz · 30/09/2025

After facing countless of limitation on #AWS #NitroEnclaves, the same feature is now available on normal EC2 instance. The coming month must be a busy month for me to try it out #ConfidentialComputing #AWSCloud aws.amazon.com/about-aws/wh...

aws.amazon.com

AWS announces EC2 instance attestation - AWS

Discover more about what's new at AWS with AWS announces EC2 instance attestation

051

Richard Fan @richardfan.xyz · 18/09/2025

Totally worth a trip to #AWSCommunityDay #Warsaw What a massive and successful community day #aws #awscloud #awscommunity #networking #tech

020

Richard Fan @richardfan.xyz · 15/09/2025

#fwdcloudsec EU is happening soon Can’t make it? No worry 📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e... #cybersecurity #security #cloudsecurity

010

Richard Fan @richardfan.xyz · 13/09/2025

After 14 hours of flight, finally arrived in Berlin, What brings me here? It’s #fwdcloudsec, a conference I always learn a lot from cloud security all-stars Can’t make it? No worry 📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e... #cybersecurity #security #cloudsecurity

030

Richard Fan @richardfan.xyz · 02/08/2025

If you created a new #AWS account with #FreeTier DO NOT follow the console recommendation to create IAM Identity Center with AWS Organization, it will EXPIRE all your free credit ❗❗❗ If you want to use IAM Identity Center, create it on account instance! #AWSCloud #CostOptimization #AWSFreeTier

010

Richard Fan @richardfan.xyz · 23/07/2025

TIL, you only need write access on a #GitHub repo to manage variables and secrets, even under environment. No admin access required🫨 It's just that it can't be accessed via UI, you need to use API or gh cli cli.github.com/manual/gh_va... cli.github.com/manual/gh_se... #devops #cicd #githubactions

010

Richard Fan @richardfan.xyz · 30/06/2025

I saw this debate on an Instagram post: www.instagram.com/reel/DI6SN7k... Here's my solution, simple and clear Why Americans love writing essay on traffic signs? #RoadDesign #HighwayDesign #RoadSafety #SignDesign #RoadSign #TrafficSign

000

Richard Fan @richardfan.xyz · 09/06/2025

Badge picked up Ready for tomorrow #Kubecon in Hong Kong #CNCF #CloudNativeCon

010

Richard Fan @richardfan.xyz · 03/06/2025

Why is #terraform #aws provider documentation showing warning of "5.99.1 not the latest version" instead of "6.0.0-beta2 is a beta version"? I thought people expect the latest stable version as the default instead of a beta one

010

Richard Fan @richardfan.xyz · 16/03/2025

When could #f1 fix this issue? They are coming to the pitlane under safety car, not changing tyres #f1tv #Formula1 i

000

Richard Fan @richardfan.xyz · 16/03/2025

When could #f1 fix this issue? They are coming to the pitlane under safety car, not changing tyres #f1tv #Formula1

000

Richard Fan @richardfan.xyz · 26/02/2025

If you are university student and want to learn about Cloud, #AWS Cloud Clubs is a great program you should join. You can get a lot of supports from AWS and the community during your journey! Deadline is 6 March. Apply now: 👉 community.aws/students #AWSCommunity #AWSCloudClubs #CloudComputing

community.aws

AWS Student Hub | AWS Cloud Clubs

Join the AWS Student Hub, a community for 18+ students interested in learning AWS technologies and connecting with the global AWS Cloud Club program.

000

Richard Fan @richardfan.xyz · 04/02/2025

I was about to report bug, thinking CloudTrail is exposing sensitive information Turned out, it's just another form of "HIDDEN_DUE_TO_SECURITY_REASONS" How many other forms do AWS uses??? 😆 #AWS #CloudTrail #CloudSecurity

010

Richard Fan @richardfan.xyz · 27/01/2025

OWASP Non-human identities top 10 is released The top of them is: Improper offboarding. When I see many existing API keys created by an ex-employee who I've never met, I totally agree it's the risk that most of us are missing owasp.org/www-project-... #Cybersecurity #OWASP #CloudSecurity

owasp.org

OWASP Non-Human Identities Top 10

A list of OWASP's Non-Human Identities Top 10 risks for 2025

010

Richard Fan @richardfan.xyz · 31/12/2024

Have spent 8 days on flights this year

000

Richard Fan @richardfan.xyz · 16/12/2024

Living in a city where the time is ahead of most other places. I love the events hosted towards the end of the week, so I can use the weekend to catchup the time I “lost” when flying back home, instead if wasting annual leave on the flight

010

Richard Fan @richardfan.xyz · 12/12/2024

As always, I visited #serverlesspresso last week in #AWSreInvent2024 ➡️ Checkout how it works behind the scene: serverlessland.com/reinvent2022... #AWSreInvent #AWS #AWSCloud #serverless

000

Richard Fan @richardfan.xyz · 12/12/2024

I'm on TV!!! 😆 That's my interview in #AWSreInvent last week (Warning ahead, It's Cantonese 😁) #AWSCommunity #AWS #AWSCloud #AWSreInvent2024 www.facebook.com/share/v/1KBB...

facebook.com

Redirecting...

010

Richard Fan @richardfan.xyz · 11/12/2024

2 of the Europe cities I visited this year Why didn’t it happen earlier? 😆

020

Richard Fan @richardfan.xyz · 09/12/2024

Last week was an exhausting #AWSreInvent week (both mentally and physically) I attended 0 sessions this year, but having some much fun meeting new and old friends!!! Now, I need to do editing for my videos #AWS #AWSCloud #AWSreInvent2024 #AWSCommunity #preinventhike

070