Miki
LightNews LightNews
mikisec.bsky.social
Miki
@mikisec.bsky.social
14 followers 100 following 20 posts
Cyber security officer by day, a fabulous cookie by night
Posts Replies Media Videos
mikisec.bsky.social
TIL: flatpak's session bus 'org.freedesktop.Flatpak' permission allows to escape the sandbox (by allowing to run commands on the host machine)

This shows the importance of not only denying access to the 'host' and 'home' filesystems.
Shell screenshot where the user runs a 'flatpak' command 3 times with 'cat /etc/os-release': 1. 1st command: run normally within a container 2. 2nd command: runs 'cat /etc/os-release' using 'flatpak-spawn --host' which leads to the flatpak executing a command outside the sandbox 3. 3rd command: disallows access to the session bus 'org.freedesktop.Flatpak' which then leads to 'flatpak-spawn --host' getting denied
May 30, 2025 at 8:46 PM
mikisec.bsky.social
Just discovered GNS3, an open source software to create virtual network labs (using VMs)

Looks amazing! Next step is to experiment with security controls and incident response.

Also cool: can sniff packets in one click between links (using Wireshark)

World's most basic set-up:
GNS3 UI showing a link between an OpenWrt router and an AlpineLinux end user device Wireshark UI showing a packet sniffing on the Ethernet link between an OpenWrt router and an AlpineLinux device
January 25, 2025 at 9:06 PM