
building solutions to secure worlds. all thoughts / opinions (if at all) are my own. labs @thinkstcanary - prev. founder @deceptiq_ (acq.)
London, England.
Joined April 2022
- Tweets1.2K
- Following92
- Followers10.4K
- Likes6.3K
Linux deserves the same care every other platform gets.
lindm v0.1.0: a self-hosted, open-source MDM for Linux fleets. Your server, your devices.
github.com/radkawar/lindm
I cannot reiterate how much of a godsend this app has become for me (+ using screenlogger as a counterpart to have an agent go figure out what rules I need to set/how to reduce productivity).
it's open source/notarized - if you (like me) like to productivitymaxx or even just understand where your time goes when you use your computer:
INSTALL IT NOW
While I do have a history of writing malware - I've changed my ways!! I promise it is not malware.
github.com/radkawar/screenti…
Everyone who uses Screentime on Mac has been disappointed/knows it sucks.
And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain.
Install Screentime++: github.com/radkawar/screenti…
e.g use YouTube without shorts! or view this beautiful desktop tile..
Everyone who uses Screentime on Mac has been disappointed/knows it sucks.
And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain.
Install Screentime++: github.com/radkawar/screenti…
Everyone who uses Screentime on Mac has been disappointed/knows it sucks.
And with ADHD - I always wished it had a few more features to block the applications that feel like what I imagine crack-cocaine would be like for the brain.
Install Screentime++: github.com/radkawar/screenti…
You remember seeing it. You don’t remember where.
Screenlogger remembers.
0.2.0 brings a fresh UI, less disk usage, and search powered by local @googlegemma embeddings.
An always-on screen recorder for Mac. Describe what you saw. Find it again.
All on your Mac.
Rad retweeted
You can watch the full talk here:
youtube.com/watch?v=dNtqZJmt…
Diaspore can now run itself which is a wild accomplishment.
In the image:
- the playground installs diaspore from PyPI
- compiles a workflow
- pauses it into JSON and resumes it
- all in your browser.
Check it out for yourself...
radkawar.github.io/diaspore/…
Write Python, ship JSON, run it anywhere, sandboxed.
Think WASM but extra steps!
- embed it in Go, Node, Lua or Python
- compile Python without Python
- durable execution across runtimes
Source: github.com/radkawar/diaspore
Playground: radkawar.github.io/diaspore
Write Python, ship JSON, run it anywhere, sandboxed.
Think WASM but extra steps!
- embed it in Go, Node, Lua or Python
- compile Python without Python
- durable execution across runtimes
Source: github.com/radkawar/diaspore
Playground: radkawar.github.io/diaspore
I've been using stackd a lot to throw agents in this AWS sandbox and see what they do - but they love cheating.
As a start to making it harder for them to cheat:
Finally: opt-in native networking for stackd!
Get resource hostnames, local HTTPS with a scoped dev CA, and DNS inside Lambda/ECS/CodeBuild.
Automatic, reversible host split DNS all without replacing your normal DNS or disabling TLS verification.
Is it magic - no it's just stackd!
stackd is out: AWS on your own machine, running a very good approximation of the real thing.
Existing AWS emulators weren't enough for me, especially for what I wanted from Organizations, CloudTrail and EventBridge.
I've had a lot of fun on the data plane. For example:
- EC2: RunInstances boots actual QEMU/KVM VMs
- EKS: real k3s clusters with add-ons and audit logs
- ECS and CodeBuild: real Docker containers
Naturally, the control plane gets just as much attention:
- IAM policy evaluation with SCPs, RCPs, permission boundaries and session policies
- AWS Organizations: delegated admins, effective policies, cross-account access
- STS, SAML/OIDC federation, Identity Center, KMS
Every call is recorded. CloudTrail trails can deliver to S3 or CloudWatch Logs, or (my favourite) to EventBridge, where rules are matched and events dispatched to their targets.
You can follow a single API call end to end:
IAM -> resource -> audit log -> event rule -> target
One Go binary, fully offline, with optional SQLite persistence so you can fork state.
70+ services so far, covering the main ones, with more coverage coming over the next few months.
Still early days, but it's already fun to use. Excited to see where it goes.
github.com/radkawar/stackd
Try it out & file feature gaps as issues etc and I'll get right on it
github.com/radkawar/stackd






















