Field Notes
Writeups, project logs, meetup recaps, and whatever else we've been taking apart. Everything here is written by members — see the repo if you want to add one.
-
Auto Squirrel: Stop Clicking Through Four Dashboards to Ship a Domain
Standing up shadyfans.world and sasquatch.sh by hand meant the same registrar-DNS-GitHub-Vercel dance every time. Auto Squirrel is the tool that does it from one plan file inste...
-
The Demo That Wouldn't Finish: How DEF CON Turned Into POISONVINE
A DEF CON AI Village TV that refused to talk to either presenter's laptop, a Docker container that built but wouldn't start, and a night of curiosity that turned into a new open...
-
Read-Only Isn't the Same as Contained: A Symlink Bug in Stockpiler's MCP Server
Kaiju Security's Stockpiler debuted at DefCon this year; the blog post about it went up this week. A look at the MCP server it ships turned up a symlink bug that let a malicious...
-
Why We're Writing This Down
SSH has a blog now. Here's what goes on it, who can post, and the two rules.