Hack@UCF May 2025 Kubernetes Outage
A root cause analysis of the outage we had on May 17th - 18th, 2025. The outage resulted in the SSO platform Keycloak being down for most of 2 days, resulting in users not being able to log in and administer their Virtual Machines.
Read more ⟶
Securing Your Domain with CAA Records: Prevent Unauthorized Certificate Issuance
An in-depth guide on securing domain ownership by using Certificate Authority Authorization (CAA) records. This post highlights the vulnerability exposed by WatchTowr Labs and explains how to implement fixes, including CAA records, certificate transparency monitoring, and DNSSEC, to protect your domain from unauthorized certificate issuance and malicious actors.
Read more ⟶
Building a Private Cloud: A DevOps Approach
Discover how Hack@UCF's private cloud empowers students with hands-on experience in cybersecurity and cloud computing. Learn about the hardware, networking, and software that drive our private cloud, and explore upcoming projects aimed at enhancing our infrastructure. Join us on this journey to build a resilient, innovative private cloud using a DevOps approach.
Read more ⟶
New Class Of Vulnerabilities Discovered (April Fools)
Summary of a humorous blog post describing a fictional cybersecurity vulnerability called Remote Bankruptcy Exploits (RBE). Highlights the satirical nature of the post and its playful take on startup vulnerabilities.
Read more ⟶
The Horse Plinko Incident (2023)
Summary of a my experience in the Horse Plinko Cyber Challenge 2023 (HPCC1). Covers competition details, cybersecurity challenges, preparation strategies, and lessons learned. Emphasizes the importance of backups, threat hunting, and persistent detection.
Read more ⟶
Project Quay Setup
With docker deleting open source organizations it might be time to selfhost your own container registry. Project Quay is the open source version of Redhat Quay, the container registry that powers quay.io. It can be configured as a pull through cache (useful for saving bandwidth). Not a lot of great guides exist for how to setup quay using docker-compose so here it is.
…Selfhosting v3
Here are my goals for my selfhosting setup v3.
- All containers updated with gitops
- All containers scanned for cves
- All apps that support use federated auth (ouath openidc ldap etc.)
Overview of Minecraft Server Hosting Technologies
This is a brief overview of diffrent minecraft servers. This is a great guide to picking the best one for your circumstances.…
Read more ⟶