Phishing with Large Language Models: Backdoor Injections

Abstract Large Language Models (LLMs) are reshaping software development by helping with everything from auto-completion to full-scale code generation. While these tools significantly boost productivity, they also introduce new security challenges. In this post, we explore how malicious modifications to an LLM can result in hidden backdoor code being injected into projects. Through proof-of-concept examples, including double-layer Base64 obfuscation and external module imports, we demonstrate methods attackers might use to insert unwanted code into otherwise helpful scripts. We also discuss practical strategies for detecting and mitigating these risks. ...

March 30, 2025 · Dennis Kruyt

PyPlexitas: Open Source CLI Alternative to Perplexity AI

PyPlexitas is a Python script that is designed to create an open-source alternative to Perplexity AI, a tool that provides users with detailed answers to their queries by searching the web, extracting relevant content, and using advanced language models to generate responses. The script operates by first taking a user’s query and using search engines like Bing or Google to find relevant web pages. It then scrapes the content from these web pages, processes the text into manageable chunks, and generates vector embeddings for these chunks. Vector embeddings are mathematical representations of text that allow for efficient searching and comparison of content. These embeddings are stored in a database, enabling quick retrieval of relevant information based on the user’s query. ...

May 19, 2024 · Dennis Kruyt

OpenRA Rebuilt for the Modern Era with Multi Arch Docker Images

I still remember the day I got Command and Conquer Red Alert as a birthday gift. I’ve spent too many hours to count playing this game over the years. These days, I still enjoy it from time to time, teaming up with my son or work buddies for a match. Today, thanks to OpenRA, an open-source version of Red Alert is available, not to mention Dune and Tiberian Sun. We usually play these games online, which is why I run them on my ARM-based server. But there’s always been one issue: there are no decent Docker images available for OpenRA. Some are outdated; others aren’t compatible with ARM architecture. So, I decided it was time to sort this out. I created a Docker build file and a Docker compose file that syncs with GitHub Actions. This setup helps me keep an eye on new OpenRA releases and auto-builds them. Whenever a new update is released, I can just pull a new Docker image onto my server. It’s as simple as that! ...

March 11, 2024 · Dennis Kruyt

Smart EV Charging with NodeRed

Smart EV Charging with NodeRed

November 5, 2023 · Dennis Kruyt

OpenSSL vulnerability don't forget your containers

OpenSSL vulnerability don’t forget your containers

November 2, 2022 · Dennis Kruyt

Building mechanical numpads

Building my own mechanical numpds

September 25, 2022 · Dennis Kruyt

Kubernetes SideCar Backup

kscb is a sidecar container, that is based upon rclone with a crontab. The sidecar container in the pod has access to the PV mount and the data on it, Rclone can then easily copy/sync to a public/private storage provider

September 29, 2021 · Dennis Kruyt

Migrate from Docker to Containerd in Kubernetes

Kubernetes is deprecating Docker as a container runtime after v1.20. Don’t Panic 😱 Docker containers are still supported, but the dockershim/Docker, the layer between Kubernetes and containerd is deprecated and will be removed from version 1.22+. https://kubernetes.io/blog/2020/12/02/dont-panic-kubernetes-and-docker/" So if you are running docker you need to change to a supported container runtime interface (CRI). containerd is a good choice, it is already running on your Kubernetes node if you are running Docker. ...

March 16, 2021 · Dennis Kruyt

Running a mailserver in Kubernetes

Running a web server in Kubernetes is easy, but a mail server is more challenging. Most of the challenges have to do with your IP infrastructure, ingress, and load balancer within Kubernetes. Here are things I learned when deploying a mail server based on Postfix on Kubernetes with MetalLB and NGINX ingress. If you have a different setup, things might or might not apply. Prevent mail loops on your secondary MX Your Postfix MX pod is maybe running on a private IP RFC1918, which is fine. But Postfix needs to know its public IP to prevent mail looping if your primary MX is down. You need to define your public incoming IP in the main.cf. So, if you use load balancing, you need to define the public IP for the LoadBalancer that would be the same IP as defined in your DNS MX record, not your outgoing IP. ...

October 19, 2020 · Dennis Kruyt

Varnish in Kubernetes

This is a simple minimal but highly configurable Varnish caching service for Kubernetes. This should be placed between your ingress and your application service. simple setup It can be used in combination with multiple ingresses and application services at the same time. multiple ingress and services Setup Apply the following yaml file, replicas and environment variables can be adjusted to your need. This will deploy the Varnish service and Varnish proxy pods. The container is now based up on Alpine Linux and Varnish 6.4 ...

September 15, 2020 · Dennis Kruyt