This only remains true in so far as no-one directly registered for a driverhub subdomain. Anyone with a wildcard could have exploited this, silent to certificate transparency?

Kali are a little to blame here for that confusion as well - "We are making enterprise grade security accessible" - is open to misinterpretation of what they are presenting.

It's meant more as a showcase of how eBPF can be applied to a technical challenge, as opposed to the author claiming they fundamentally broke TLS.

It's fairly obvious if you're on the receiving end what the purpose of the test is when you're being observed (as with most interview questions, it helps to ask yourself why the interviewer asking me / having me do this?)

Bought the device with the hope that I could register an account for the first time in years, but similar to others, my account was instantly banned with no explanation other than "violating community guidelines."

One of Facebook's arguments against anti-trust accusations has been to point to the lack of consumer harm. This is fairly obvious evidence of material harm to consumers who just bought $500 paperweights.

Worth a look if you'd like to make your own! http://stegosploit.info/

Generally, recommendation would be to pick a few topics that you're interested and find related communities and meetups. You'll find interesting people through osmosis.