Rohan's Personal Blog
With the rise in AI usage, many llm self hosted dashboard solutions started providing cloud templates which you can host in your azure, gcp or aws. Everyone knows 169.254.169.254 cloud endpoint which works with most clouds, We will talk...
Many people suggested me to write finance views, so here is my first finance post. I love data and statistics, Everything I write in this blogs will be backed by data. As a tax payers, we need to know...
In simple terms with Azure policy, you can audit, deny, and modify if any resource is misconfigured. It’s very helpful for creating secure defaults in Azure Cloud.why would you create secure defaults?For example, if someone from your organization is...
This is the easiest bug I have found by far in my overlong career, So it wouldn’t be long blog. My parents always told me to look forward to being like Mr. Arvinda Padhee, my hometown IAS officer. I...
If you have not gone through part-1(istio), I would recommend you to please visit- https://osquery.net/service-mesh-1/ & the labs are identical for this blog also. It really took a few days of effort.Linkerd uses a Rust-based micro proxy called Linkerd2-proxy....
In this blog, We will discuss how to implement end-to-end security between microservices. I will cover mostly Istio service mesh,linkerd service mesh & a hint of tenzu.If you want to reproduce the below labs you can use- https://github.com/c0ldb00t3r/k8s-poc/tree/main/service-mesh-demo.Set up...
OP-ED !!After working for many organizations as a full-time & CW security engineer, interviewed as well as interviewing for the position more than 100 times, I am writing this blog to help my fellow security engineers identify red flags...
What’s an admission controller?First of all, do you know what happens when you create a pod via Kubectl? Let’s do that -So when you create a pod, the API request goes to authentication and authorization. Then the pod object...
PSP admission controller was used by teams to validate and mutate security contexts. In simple terms, we define a set of controls with which pods can be created. If the control doesn’t satisfy it rejects or updates.If you to...
During the lockdown, I was in my hometown, and my brother was not giving the router dashboard access as I always set QoS to my systems. “Necessity is the mother of invention.”It needed to chain two issues for successful exploitation.It...