My name is Ian, sometimes I do independent security research. That’s what this site is for.
I also have a dayjob that involves security. That is not what this site is for.
SpankMatch, Secrets, and (Everyone's!) Orphaned Google Container Registry Layers
In which Google moves the headstones and leaves the bodies.
Zigazoo too, Another Firebase Boogaloo
GCP security at "The World's Largest Social Network for Kids!"
Call Me Phishmael
Hunting Sensitive Docker Images in Google Container Registry Leaks