Blog
Using Hermes Agent for Security Workflows
On: 15 Jun 2026 By: Jason Barbier ·hermes-agent security ai-agents soc appsec hermes-as-a-security-agent-series
Using Hermes Agent for Security Workflows I have been using Hermes Agent for security work – triage pipelines, code-review gates, threat-intel summarization, compliance collection, incident response data analysis. This post is about where it fits, what it can do, and where it breaks.
RAG Poisoning: When Your "Safe" AI Eats Bad Documents
On: 24 Apr 2026 By: Jason Barbier ·RAG LLM AI Security Prompt Injection Adversarial ML Embeddings Infosec Cybersecurity
RAG Poisoning: When Your “Safe” AI Eats Bad Documents So you built a RAG pipeline. Congrats. You probably think you’re safe because the LLM “only answers from approved documents.” I have some bad news.
Inspecting ContainerNet
On: 21 Jul 2022 By: Jason Barbier ·Docker Networking
Inspecting ContainerNet For various reasons there may be a time that you have to answer the question “What the heck are my containers saying on the network?” The answer I found to how to answer that question was a less than satisfying “well install tcpdump everywhere, dump the contents to a docker volume inspect later”. That felt less than satisfying and produced a lot of work that just didnt feel needed. I know on a traditional network you can dump a machine into promiscuous mode and let the packets roll in so I wondered “Why cant I do that in docker!” turns out the answer was you can, if you know how. So lets walk down that path.
My FreeBSD Laptop Build
On: 21 Jun 2020 By: Jason Barbier ·FreeBSD Laptops Workstation
My FreeBSD Laptop Build I have always liked Thinkpad hardware and when I started to do more commuting I decided I needed something that had a decent sized screen but fit well on a bus. Luckily about this time Lenovo gave me a nice gift in the Thinkpad X390. Its basically the famous X2xx series but with a 13” screen and smaller bezel. So with this laptop I figured it was time to actually put the docs together on how I got my FreeBSD workstation working on it. I will here in the near future have another post that will cover this for HardenedBSD as well since the steps are similar but have a few extra gotchas due to the extra hardening.
Tooling the hyve
On: 19 Dec 2018 By: Jason Barbier ·Hey all, It’s been a while here so I figured I would write up some stuff I have been playing with. This go around it is BHYVE on FreeBSD. BHYVE is a great hypervisor project that started with the idea of FreeBSD needing its own hypervisor like KVM, but if we were going to make KVM today what would we do? There are all sorts of features with it and it gets better every day but as a Sysadmin my major gripe with it has been simple, tooling. Well Libvirt to the rescue.
Curing the insomnia, enable sleep for the X1 Carbon 6th Gen
On: 06 Jun 2018 By: Jason Barbier ·Curing the insomnia, enable sleep for the X1 Carbon 6th Gen So I recently got a great deal on an X1 Carbon 6th generation and love it, but there were a few downsides to it. The biggest down side is recently Lenovo decided to go all in on new is better and only provides S0ix sleep states. This is an issue for operating systems that do not support S0ix sleep states yet, like FreeBSD. But never fear, thanks to a few linux hackers and some creative work we can patch S3 back into our DSDT tables and be good to go.
FreeBSD on the System76 Galago Pro
On: 15 May 2018 By: Jason Barbier ·Hardware System76 FreeBSD
FreeBSD on the System76 Galago Pro Hey all, It’s been a while since I last posted but I thought I would hammer something out here. My most recent purchase was a System76 Galago Pro. I thought, afer playing with POP! OS a bit, is there any reason I couldn’t get BSD on this thing. Turns out the answer is no, no there isnt and it works pretty decently.
PowerShell DSC and the cryptic error message!
On: 24 Jan 2017 By: Jason Barbier ·Tools PowerShell DSC
PowerShell DSC and the cryptic error message! DSC is a great idea that is still in the process of being completely baked out in windows. As such there are still a few quirks and issues, one of them being error messages. Today I ran into one of those ever great cryptic messages Failed to get the action from server http://server/PSDSCPullServer.svc/Action(ConfigurationId='foo')/GetAction, so lets talk about it.
Bending DuckDuckGo to do your bidding.
On: 16 Feb 2016 By: Jason Barbier ·Tools
Bending DuckDuckGo to do your bidding. It turns out while thinking ahead I decided I will at some point need to give people a way to search my blog. Not wanting to write or host an indexer myself I thought maybe I’ll turn to my favorite search engine of all time, DuckDuckGo.
State of Go 2016
On: 03 Feb 2016 By: Jason Barbier ·Go Languages
The State of Go 2016 Looking at some of the stuff comming out of Go right now I am getting really interested in it again as a primary utility language. The slide deck I am referencing is at https://talks.golang.org/2016/state-of-go.slide#1. Crusing through this deck it looks like the Go people are committed to making Go great and with all the changes that have went in the past year they are succeeding. Take a peek at the deck and be prepared to be amazed.