building solutions to secure worlds. all thoughts / opinions (if at all) are my own. labs @thinkstcanary - prev. founder @deceptiq_ (acq.)

London, England.
Joined April 2022
Pinned Tweet
Linux deserves the same care every other platform gets. lindm v0.1.0: a self-hosted, open-source MDM for Linux fleets. Your server, your devices. github.com/radkawar/lindm
1
9
935
I cannot reiterate how much of a godsend this app has become for me (+ using screenlogger as a counterpart to have an agent go figure out what rules I need to set/how to reduce productivity). it's open source/notarized - if you (like me) like to productivitymaxx or even just understand where your time goes when you use your computer: INSTALL IT NOW While I do have a history of writing malware - I've changed my ways!! I promise it is not malware. github.com/radkawar/screenti…
Everyone who uses Screentime on Mac has been disappointed/knows it sucks. And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain. Install Screentime++: github.com/radkawar/screenti…
1
3
810
Last month, cyber as an industry saw 1.3 billion of venture capital fund startups from varying stages. For reference $CRWD did $1.47 billion in Q2 FY2027. God damn!
1
3
1,066
e.g use YouTube without shorts! or view this beautiful desktop tile..
Everyone who uses Screentime on Mac has been disappointed/knows it sucks. And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain. Install Screentime++: github.com/radkawar/screenti…
1
586
Everyone who uses Screentime on Mac has been disappointed/knows it sucks. And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain. Install Screentime++: github.com/radkawar/screenti…
1
2
1
9
2,715
For almost everyday for 15 years I’ve used a computer for hours a day (everyday). Over the last week I didn’t use a computer at all! Nor did I spend time with any agents/LLMs (minus a little grok @bot) on my phone. Anywho, here is some cool cat art that I saw:
2
8
729
slowly undeepfrying my brain
1
1
217
You remember seeing it. You don’t remember where. Screenlogger remembers. 0.2.0 brings a fresh UI, less disk usage, and search powered by local @googlegemma embeddings. An always-on screen recorder for Mac. Describe what you saw. Find it again. All on your Mac.
1
1
9
1,082
I've open-sourced lindm: a self-hosted MDM for Linux fleets: - Enroll devices, - Push profiles with staged rollouts, - TPM disk encryption with escrowed keys, - Lock and Wipe, - OS update windows, - And remote assistance with user consent. github.com/radkawar/lindm
4
3
1
48
2,720
Enrolment is pretty straightforward!
1
189
And of course, all the enterprise-y features you come to expect of an MDM like RBAC, approvals, SCIM provisioning, and web hooks.
175
Diaspore can now run itself which is a wild accomplishment. In the image: - the playground installs diaspore from PyPI - compiles a workflow - pauses it into JSON and resumes it - all in your browser. Check it out for yourself... radkawar.github.io/diaspore/…
Write Python, ship JSON, run it anywhere, sandboxed. Think WASM but extra steps! - embed it in Go, Node, Lua or Python - compile Python without Python - durable execution across runtimes Source: github.com/radkawar/diaspore Playground: radkawar.github.io/diaspore
1
13
1,294
I find it insane that this can install packages - and of that install itself, and then run itself within itself now. Honestly quite a fun thing to work on.
216
Write Python, ship JSON, run it anywhere, sandboxed. Think WASM but extra steps! - embed it in Go, Node, Lua or Python - compile Python without Python - durable execution across runtimes Source: github.com/radkawar/diaspore Playground: radkawar.github.io/diaspore
3
2
1
36
4,230
I've been using stackd a lot to throw agents in this AWS sandbox and see what they do - but they love cheating. As a start to making it harder for them to cheat: Finally: opt-in native networking for stackd! Get resource hostnames, local HTTPS with a scoped dev CA, and DNS inside Lambda/ECS/CodeBuild. Automatic, reversible host split DNS all without replacing your normal DNS or disabling TLS verification. Is it magic - no it's just stackd!
stackd is out: AWS on your own machine, running a very good approximation of the real thing. Existing AWS emulators weren't enough for me, especially for what I wanted from Organizations, CloudTrail and EventBridge. I've had a lot of fun on the data plane. For example: - EC2: RunInstances boots actual QEMU/KVM VMs - EKS: real k3s clusters with add-ons and audit logs - ECS and CodeBuild: real Docker containers Naturally, the control plane gets just as much attention: - IAM policy evaluation with SCPs, RCPs, permission boundaries and session policies - AWS Organizations: delegated admins, effective policies, cross-account access - STS, SAML/OIDC federation, Identity Center, KMS Every call is recorded. CloudTrail trails can deliver to S3 or CloudWatch Logs, or (my favourite) to EventBridge, where rules are matched and events dispatched to their targets. You can follow a single API call end to end: IAM -> resource -> audit log -> event rule -> target One Go binary, fully offline, with optional SQLite persistence so you can fork state. 70+ services so far, covering the main ones, with more coverage coming over the next few months. Still early days, but it's already fun to use. Excited to see where it goes. github.com/radkawar/stackd
2
1
10
1,416
Try it out & file feature gaps as issues etc and I'll get right on it github.com/radkawar/stackd
1
213