https://glyph.sh/posts/openai-ai-agent-hacked-hugging-face/2026-07-23T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/openai-huggingface-agent-hack.svgAn Autonomous AI Agent Hacked Hugging Face: Breaking Down the OpenAI IncidentOpenAI's models escaped an isolated eval sandbox through a zero-day in a package-registry proxy, then autonomously compromised Hugging Face to steal the ExploitGym answer key. Here's the actual attack chain, not the headline version.https://glyph.sh/posts/2026-07-23T00:00:00+00:00weekly0.8https://glyph.sh/posts/unwedging-a-stuck-icloud-drive-sync-on-macos/2026-07-21T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/icloud-sync-unwedge.svgUnwedging a Stuck iCloud Drive Sync on macOSWhen iCloud Drive gets stuck with bird and fileproviderd pegged at 100% CPU, here's how to diagnose the backlog and reset the local sync database without losing data.https://glyph.sh/posts/flock-safety-michigan-fight-back/2026-06-14T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/flock-surveillance-michigan.svgFlock Is Coming to Your Michigan City. Here's How to Fight It - Legally.Flock Safety's automated license plate readers are spreading across Michigan with almost no rules. Here's what the technology actually does, why it is the wrong solution, and how to push back through the political system that already works.https://glyph.sh/posts/blackmagic-camera-app-xml-schema-reference/2026-05-01T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/content-creation-streaming.svgBlackmagic Camera App XML Schema ReferenceThe complete XML schema for the Blackmagic Camera app custom streaming service: every element, attribute and valid value for RTMP and SRT setups, quick-start template, worked examples and how to import the file on iPhone.https://glyph.sh/posts/setting-up-a-ventoy-multi-boot-usb-from-macos/2026-04-16T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/ventoy-multiboot-usb.jpgVentoy on macOS: Build a Multi-Boot USB from a Mac (No Linux or Windows Needed)Yes, Ventoy works from a Mac. Step-by-step: partition the drive with diskutil, write the Ventoy boot code and VTOYEFI partition with dd, then drop Windows, Linux and rescue ISOs onto one USB and boot any of them.https://glyph.sh/posts/building-an-always-on-raspberry-pi-security-platform/2026-03-26T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/building-an-always-on-pi.jpgBuilding an Always-On Raspberry Pi Security PlatformFrom headless setup to reverse SSH tunnels, LUKS encryption, and a kill switch -- how a Raspberry Pi 3B+ became a portable pentest drop box reachable from anywhere.https://glyph.sh/tools/ad-troubleshooter/2026-03-25T00:00:00+00:00weekly0.7https://glyph.sh/posts/ios-annoyances-android-switchers/2026-03-25T00:00:00+00:00weekly0.8https://glyph.sh/img/templates/productivity.svgiOS Annoyances Coming from Android: File Defaults, Autocorrect, and AirDropQuick fixes for common iOS frustrations when switching from Android -default app hijacking, aggressive autocorrect, and AirDrop limitations on hotspothttps://glyph.sh/tools/2026-03-25T00:00:00+00:00weekly0.7https://glyph.sh/tools/default-credentials/2026-03-25T00:00:00+00:00weekly0.7https://glyph.sh/posts/ai-generated-code-injection-aws-credentials/2026-03-23T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/web-security-basics.svgClaude AI Wrote Code That Could Have Stolen My AWS CredentialsA simple NameError led me to discover critical code injection vulnerabilities in AI-generated bash scripts that could exfiltrate credentials and execute arbitrary codehttps://glyph.sh/posts/iphone-blackmagic-camera-obs-rtmp/2026-05-01T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/content-creation-streaming.svgStream iPhone Blackmagic Camera to OBS on Mac with Local RTMPStream your iPhone to OBS Studio with full manual camera controls. Use OBS plugins, filters, and scenes with your iPhone camera. Keep your entire streaming setup while using iPhone as a camera source.https://glyph.sh/case-studies/2026-03-01T00:00:00+00:00weekly0.6https://glyph.sh/case-studies/glyphmemory-cross-session-ai-memory/2026-03-01T00:00:00+00:00weekly0.5https://glyph.sh/posts/laptop-system-monitoring-stack/2026-02-15T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/web-security-basics.svgSystem Monitoring on a Daily-Driver Laptop: What Actually FitsExploring what monitoring actually runs on a 16GB daily-driver laptop. Started with Wazuh SIEM, built a Prometheus + Grafana + node_exporter stack instead. Here's what works, what doesn't, and what comes next.https://glyph.sh/posts/cve-2025-6218-winrar-path-traversal-exploit-patch-guide/2026-06-17T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/web-security-basics.svgWinRAR CVE-2025-6218 & CVE-2025-8088: Are You Patched? (Fix: Update to 7.13+)WinRAR 7.12 and older are exploitable: CVE-2025-6218 path traversal (CISA KEV) plus the CVE-2025-8088 zero-day bypass used by RomCom and Sandworm. How to check your version, spot exploitation, and fix it: update to 7.13+ or replace WinRAR with 7-Zip.https://glyph.sh/posts/management-frameworks-for-it-leaders-what-actually-works/2025-12-09T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/management-frameworks.svgManagement Frameworks for IT Leaders: What Actually WorksPractical guide to using Kanban, Eisenhower Matrix, SWOT analysis, and Gantt charts for managing IT infrastructure and security projects - from someone who's actually used themhttps://glyph.sh/fingerprint/2025-12-08T00:00:00+00:00weekly0.5https://glyph.sh/posts/workplace-note-taking/2025-11-19T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/note-taking.svgNote-Taking at Work: How to Stay Organized When Everything is ChaosWhy note-taking matters for engineers and IT professionals, and how to build a system that actually works when you're juggling meetings, incidents, and projects.https://glyph.sh/posts/everything-as-code-the-2025-platform-engineering-playbook/2025-11-18T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/platform-engineering.svgEverything as Code: The 2025 Platform Engineering PlaybookHow Infrastructure, Policy, Configuration, and even Application code are converging into a single programmable stack. Practical lessons from building self-service platforms with Terraform on AWS and Azure.https://glyph.sh/posts/ai-assisted-content-why-transparency-matters/2025-11-16T22:00:00-05:00weekly0.8https://glyph.sh/img/posts/ai-transparency.svgAI-Assisted Content: Why Transparency MattersAn honest discussion about using AI assistance in professional work, the distinction between AI-generated and AI-assisted content, and why transparency matters.https://glyph.sh/posts/blocking-ai-scrapers-with-aws-waf-a-technical-guide/2026-06-17T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/blocking-ai-scrapers.svgBlock AI Scrapers (GPTBot, ClaudeBot, PerplexityBot) with AWS WAFAI crawlers were hitting paths my robots.txt disallows ~72x/day. How AI trainers, user-triggered fetchers and search indexers differ, and the exact AWS WAF rules to block GPTBot, ClaudeBot, PerplexityBot and friends, with cost and monitoring.https://glyph.sh/scripts/scripts-license/2025-11-14T00:00:00+00:00weekly0.7https://glyph.sh/scripts/accountcompromiseresponse.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/adhealthcheck.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/backup-report-generator.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/backup-verification.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/bulkusermanagement.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/disk-space-monitor.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/evidencecollection.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/failed-login-monitor.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/linux-health-check.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/log-analyzer.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/macos-security-audit.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/macos-update-status.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/networkdiagnostics.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/networkstackreset.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/portscanner.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/printspoolerreset.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/security-audit.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/ssl-cert-checker.sh/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/systemfilechecker.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/systemisolation.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/userlockoutfinder.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/scripts/windowsupdatereset.ps1/2025-11-13T00:00:00+00:00weekly0.7https://glyph.sh/posts/cisco-asa-zero-days-predicted/2026-06-17T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/cisco-asa-zero-days.svgCisco ASA Zero-Days: When Threat Intelligence Predicted the AttackHow GreyNoise detected the Cisco ASA attack weeks before it went publichttps://glyph.sh/posts/ad-blockers-broke-my-back-to-top-button/2025-11-10T14:00:00-05:00weekly0.8https://glyph.sh/img/posts/ad-blockers.svgHow Ad Blockers Broke My Back-to-Top Button (And How I Fixed It)A deep dive into debugging why a simple back-to-top button wouldn't appear, and the surprising culprit: aggressive ad blocker filter lists.https://glyph.sh/tools/certificate-analyzer/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/cheatsheets/2025-11-10T00:00:00+00:00weekly0.6https://glyph.sh/cheatsheets/cisco-ios/2025-11-10T00:00:00+00:00weekly0.6https://glyph.sh/tools/email-preheader/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/cheatsheets/git/2025-11-10T00:00:00+00:00weekly0.6https://glyph.sh/tools/hash-identifier/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/tools/html-entity-encoder/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/cheatsheets/juniper-junos/2025-11-10T00:00:00+00:00weekly0.6https://glyph.sh/tools/jwt-decoder/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/scripts/linux/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/scripts/linux/security/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/scripts/macos/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/tools/qr-code-generator/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/posts/static-site-hosting-on-aws-fast-secure-and-cheap/2026-06-17T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/static-site-hosting.svgStatic Site Hosting on AWS: Fast, Secure, and CheapHow to host a static site on AWS using S3 and CloudFront - the architecture behind glyph.shhttps://glyph.sh/tools/url-encoder/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/tools/utm-builder/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/cheatsheets/vi/2025-11-10T00:00:00+00:00weekly0.6https://glyph.sh/tools/vlan-calculator/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/scripts/windows/emergency/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/scripts/windows/quick-fixes/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/scripts/windows/2025-11-10T00:00:00+00:00weekly0.7https://glyph.sh/posts/hello-world/2025-11-09T16:43:32-05:00weekly0.8https://glyph.sh/img/posts/hello-world.svgHello WorldWelcome to the new glyph.sh sitehttps://glyph.sh/2025-11-09T16:43:31-05:00weekly1.0https://glyph.sh/img/og-image.pngglyph.sh | IT Infrastructure, Security & Automation ResourcesProduction infrastructure code, security tools, and automation - built and deployed, not just written about. Free to use.https://glyph.sh/cheatsheets/aws/2025-11-09T00:00:00+00:00weekly0.6https://glyph.sh/tools/base64/2025-11-09T00:00:00+00:00weekly0.7https://glyph.sh/cheatsheets/docker/2025-11-09T00:00:00+00:00weekly0.6https://glyph.sh/tools/hash-generator/2025-11-09T00:00:00+00:00weekly0.7https://glyph.sh/cheatsheets/linux/2025-11-09T00:00:00+00:00weekly0.6https://glyph.sh/cheatsheets/networking/2025-11-09T00:00:00+00:00weekly0.6https://glyph.sh/cheatsheets/pentest/2025-11-09T00:00:00+00:00weekly0.6https://glyph.sh/scripts/2025-11-09T00:00:00+00:00weekly0.7https://glyph.sh/tools/subnet-calculator/2025-11-09T00:00:00+00:00weekly0.7https://glyph.sh/tools/timestamp-converter/2025-11-09T00:00:00+00:00weekly0.7https://glyph.sh/posts/web-application-security-what-i-wish-i-knew-earlier/2025-11-09T00:00:00+00:00weekly0.8https://glyph.sh/img/posts/web-security-basics.svgWeb Application Security: What I Wish I Knew EarlierLessons learned from implementing security practices in production environmentshttps://glyph.sh/cheatsheets/wireless/2025-11-09T00:00:00+00:00weekly0.6https://glyph.sh/case-studies/glyphsh-site-infrastructure/2025-11-01T00:00:00+00:00weekly0.5https://glyph.sh/case-studies/cloud-infrastructure-aws/2024-03-01T00:00:00+00:00weekly0.5https://glyph.sh/case-studies/enterprise-security-implementation/2023-11-01T00:00:00+00:00weekly0.5https://glyph.sh/case-studies/business-process-automation/2022-08-01T00:00:00+00:00weekly0.5https://glyph.sh/403.htmlweekly0.5https://glyph.sh/about/weekly0.5https://glyph.sh/bookmarks/weekly0.6https://glyph.sh/hire/weekly0.5