Category: IT Security

Hello, Kubernetes users! 👋 Today, we’re going to explore two key features that make Helm even more powerful and flexible. These are the ability to skip CRD (Custom Resource Definitions) installation and the ability to only check the resulting Kubernetes manifests (YAML) without actually installing the chart. Have you ever wondered why these features are…

Hello! 👋 Today, we’re going to dive deep into the Gateway API, a new standard for managing incoming traffic to Kubernetes (k8s) clusters. Have you ever felt the limitations of the existing Ingress approach and wondered how the Gateway API solves those problems and provides a better experience? Through this article, we’ll clearly explain everything…

Hello, everyone interested in web security and penetration testing! 🕵️‍♀️ Have you ever seen a “Your connection is not secure” warning in your address bar while web surfing, even when it shows https://? This warning might be even more familiar if you’ve used proxy tools like Burp Suite. Today, we’ll delve into why this “Your…

Hello, developers! Today, I’d like to talk about a security vulnerability that is very commonly found in web applications, but can become uncontrollable once exploited, and its solution. 👨‍💻 Imagine you recently found the following modification during a code review. // Before 👎 // const { userId } = req.params; // After 👍 const {…

Hello! 👋 Today, I’d like to talk about Slack, the best collaboration tool for boosting work efficiency. Many of you using Slack might be wondering, ‘Is the free version enough?’ or ‘What features would necessitate upgrading to a paid plan?’ That’s why we’ve prepared this! We’ll thoroughly explore the differences between Slack’s free and paid…

Hello, explorers of the Linux and cloud-native world! 🚀 Today, we’re going to dive deep into a powerful certification that proves you’re a Linux expert: LFCS (Linux Foundation Certified Sysadmin). In particular, for those of you curious, I’ll clearly explain how its difficulty compares to CKA (Certified Kubernetes Administrator) and CKAD (Certified Kubernetes Application Developer),…

Hello, future white-hat hackers and cybersecurity professionals! 🕵️‍♂️ Today, I’m going to thoroughly explore OffSec certifications, which boast the highest authority in the information security field, especially in the offensive security domain. Many of you might have questions like, ‘I heard OffSec certifications are expensive…?’, ‘Is it true that all exams are practical?’ Today, I…

AI’s hallucination is a phenomenon where it plausibly answers with content that differs from facts. This problem becomes more direct when installing development tools. It’s not just about misunderstanding an explanation; it’s about deciding what to run on your computer. I also experienced such trial and error while installing the Samsung Cloud Platform CLI, a…

CVE (Common Vulnerabilities and Exposures) is an identification scheme that distinguishes publicly disclosed security vulnerabilities. CVE-2026-99999 is indeed a publicly disclosed Linux kernel vulnerability. You cannot dismiss it as fake just because the number seems unfamiliar. However, you also shouldn’t interpret its severity score alone to mean that all virtual machines on the internet can…

YubiKey is a physical security key used for logging in. This time, through a purchase offer provided by OpenAI and Yubico, I bought two, a C Nano and a C NFC, for around 100,000 KRW and have received the products. I learned about this offer after my Daybreak Blue approval. While looking into related information…