iiinova — where your digital self keeps evolving

Reposted by mozillazg

Rory McCune @mccune.org.uk · 10/03/2026

Kubernetes SIG-Security docs have been doing some work to refresh the OWASP Kubernetes Top 10, to help cluster operators and users have a clear idea of where to start with Kubernetes security. slightly delayed, we have our draft top 10 out now. Any feedback very welcome owasp.org/www-project-...

owasp.org

OWASP Kubernetes Top Ten | OWASP Foundation

Welcome to the OWASP Top Ten for Kubernetes

3158

Reposted by mozillazg

Mark Atwood @mark.atwood.name · 17/10/2025

If you are a volunteer maintainer of an open source project, you owe nobody a "responsible disclosure" policy. If enterprises and foundations want you to have one, tell them they can pay you.

021

Reposted by mozillazg

TracketPacer @tracketpacer.com · 09/10/2025

what happens if u cut 4 wires out of an ethernet cable & then plug it into yr PC

1529643

Reposted by mozillazg

Datadog Security Labs @securitylabs.datadoghq.com · 08/10/2025

Our State of Cloud Security 2025 study is out! www.datadoghq.com/state-of-clo... • On AWS, 40% of organizations leverage data perimeters • 11% of Google Cloud GKE and 23% of Google Cloud VMs are overprivileged • On Azure, 1.3% of storage containers are public, 58% proactively block public access

datadoghq.com

State of Cloud Security | Datadog

For our 2025 report, we analyzed AWS, Google Cloud, and Azure data from thousands of organizations to understand the latest trends in cloud security posture.

184

Reposted by mozillazg

Rory McCune @mccune.org.uk · 06/10/2025

Calling all Kubernetes security interested folk. We're planning the next version of the OWASP Kubernetes Top 10, and have a survey to solicit ideas and feedback here docs.google.com/forms/d/e/1F... . Shouldn't take more than a couple of minutes to fill out and all feedback's welcome!

docs.google.com

OWASP Kubernetes Top 10 2025 Survey

We're looking to update the OWASP Kubernetes Top 10 and as such want to canvas ideas on what should be included. The goal of the Top 10 is to provide awareness on the most serious risks that Kubernet...

067

Reposted by mozillazg

nixCraft @cyberciti.biz · 31/08/2025

If you're new to the Unix or Linux command line, I just want you to know: Me and all my colleagues with years of experience Still get confused between `ln -s` and `ln` daily.

2929423

Reposted by mozillazg

Paul Chaignon @pchaigno.bsky.social · 11/08/2025

The list of papers accepted at the 3rd #eBPF workshop has been published! conferences.sigcomm.org/sigcomm/2025...

Screenshot of the eBPF workshop program, showing Session 3 ("Time for Better and Safer Programming") and the beginning of Session 4 ("Profiling meets Machine Learning and Privacy").

043

Reposted by mozillazg

Marc Boorshtein @mlbiam.dev · 16/08/2025

Please please please please do not follow this advice. Sealed secrets are a terrible idea. Git is designed to be easily branchesd and not tracked. Secrets management is about tracking secrets and easy rotation. Encrypting data in git isn't more secure then keeping your secrets in etcd.

151

Reposted by mozillazg

Frederic Branczyk @brancz.com · 16/08/2025

Ok, I have a rant I have to let go of. If you generate a change to an open-source project fully with AI, didn't read, review, understand, and questioned it, then at least have the decency to say this on the PR description. You're stealing people's time by making them review it for you.

3407

Reposted by mozillazg

Bill Mulligan 🐝🐝🐝 @breakawaybilly.bsky.social · 10/07/2025

Next eBPF acquisition in the books, this time for security www.cyera.com/de/press-rel...

041

Reposted by mozillazg

Paul Chaignon @pchaigno.bsky.social · 30/04/2025

With NSDI'25 coming to an end today, I've updated the list of #eBPF papers to include the three papers published at USENIX NSDI this year! pchaigno.github.io/bpf/2025/01/...

Screenshot of the top of the list, showing the interactive selectors and the three eBPF papers published at NSDI'25.

022

Reposted by mozillazg

tmp0ut @tmpout.sh · 21/03/2025

Would you look at that, it's tmp.0ut Volume 4! Happy Friday, hope you enjoy this latest issue! tmpout.sh/4/

212163

Reposted by mozillazg

Paul Chaignon @pchaigno.bsky.social · 11/02/2025

I've added talk recordings to my list of eBPF papers, when available. That's 33 videos of ~20min discussing various aspects and use cases of #eBPF! pchaigno.github.io/bpf/2025/01/...

085

mozillazg @mozillazg.bsky.social · 10/02/2025

ptcpdump v0.32.1 is released! 1. fix(backend): enable process filtering for the cgroup-skb backend 2. Use BPF ringbuf instead of perfbuf when kernel support is available 3. improve detection of backported tcx/ringbuf support in older kernels github.com/mozillazg/pt...

github.com

Release v0.32.1 · mozillazg/ptcpdump

Changelog 792bbe1 fix(backend): enable process filtering for the cgroup-skb backend (#246) 020852d chore(bpf): improve detection of backported tcx/ringbuf support in older kernels (#244) d8b42a1 c...

000

Reposted by mozillazg

Rory McCune @mccune.org.uk · 29/01/2025

The next blog in our #Kubernetes #Security fundamentals series is out now. This time we're taking a look at the world of network security! securitylabs.datadoghq.com/articles/kub...

securitylabs.datadoghq.com

Kubernetes security fundamentals: Networking | Datadog Security Labs

A look at how network security works in Kubernetes

0197

mozillazg @mozillazg.bsky.social · 19/01/2025

ptcpdump v0.32.0 is released! * Add support for capturing traffic based on user ID * Enrich capture output with user information * Support for displaying thread ID and name in cgroup-skb output github.com/mozillazg/pt...

github.com

Release v0.32.0 · mozillazg/ptcpdump

Changelog f5c4d69 feat(filter): Add support for capturing traffic based on user ID (#233) 924c6fa chore(deps): update github.com/cilium/ebpf to v0.17.1 (#232) 3f1dab8 chore(output): Remove group I...

000

Reposted by mozillazg

Rory McCune @mccune.org.uk · 18/01/2025

First blog post of the new year and this is one I've been meaning to write up for a while which is some details on #Kubernetes API Server proxy feature and how it might be possible to use some known weaknesses in it to escalate your privileges in a cluster. raesene.github.io/blog/2025/01...

raesene.github.io

Exploring the Kubernetes API Server Proxy

02414

Reposted by mozillazg

Rory McCune @mccune.org.uk · 14/01/2025

The next in my #Kubernetes #Security fundamentals video series is up now. This time I'm looking at how service account authentication works in Kubernetes, with some hopefully interesting details on how bound service account tokens work. youtu.be/jTswj4CS4IA?...

youtu.be

Kubernetes Security Fundamentals: Authentication - Part 3

YouTube video by Datadog

0359

Reposted by mozillazg

Paul Chaignon @pchaigno.bsky.social · 07/01/2025

I've made an interactive list of #eBPF research papers. Only papers from the top academic conferences, including lots of papers on eBPF verification, kernel offloads, security analysis, etc. pchaigno.github.io/bpf/2025/01/... I plan to keep the list up-to-date.

pchaigno.github.io

eBPF Research Papers

When I started reading on BPF there weren’t many academic papers to describe how it worked, how it didn’t, or how it is used. There are many blog posts and informal articles out there, but it’s harder...

11813

mozillazg @mozillazg.bsky.social · 01/01/2025

happy new year!💥🎇🥳🎉🎊

010

Reposted by mozillazg

Julia Evans @b0rk.jvns.ca · 13/12/2024

writing about the terminal is so funny because it's like "redirects are so useful! hooray!" "okay and also `cmd file.txt > file.txt` will permanently delete the contents of `file.txt`” lots of cool useful tools with the occasional horrifying fact that you just need to keep seared into your memory

1928423

Reposted by mozillazg

Christophe Tafani-Dereeper @christophetd.fr · 04/12/2024

Stratus Red Team v2.20.0 is now available, with great contributions from @flekyy90.bsky.social allowing you to reproduce AWS TTPs seen in the wild! ➔ Use GetFederationToken to generate temporary credentials ➔ Use SendSerialConsoleSSHPublicKey to pivot to EC2 instances github.com/DataDog/stra...

1149

Reposted by mozillazg

Datadog Security Labs @securitylabs.datadoghq.com · 03/12/2024

We're now officially on Bluesky! Expect: ➔ New articles on Security Labs about cloud, container and application security ➔ OSS projects for cloud security practioners ➔ Conference talks at community conferences See also our starter pack bsky.app/starter-pack... with our authors and researchers!

2199