iiinova — where your digital self keeps evolving

Smarticu5 @smarticu5.bsky.social · 16/11/2025

+1 to this. I have the large and it’s incredible, but very much large. I can do a week out of it in the summer.

Smarticu5 @smarticu5.bsky.social · 15/11/2025

Oh good, another multitenanted security control being bounded by namespace labelling in Kubernetes. What could go wrong? kubernetes.io/docs/concept..., h/t to @mccune.org.uk for pointing this out.

020

Reposted by Smarticu5

Rory McCune @mccune.org.uk · 10/11/2025

We've got a new blog out looking at Kubernetes versions in use in real-world clusters, and it's actually quite good news from a security perspective. securitylabs.datadoghq.com/articles/a-2...

securitylabs.datadoghq.com

A 2025 look at real-world Kubernetes version adoption | Datadog Security Labs

A 2025 look at real-world Kubernetes version adoption

0195

Smarticu5 @smarticu5.bsky.social · 25/10/2025

Thought this was a reply to @rawkode.dev at first.

130

Reposted by Smarticu5

Rory McCune @mccune.org.uk · 23/10/2025

You've got just over a week to contribute feedback for the new OWASP Kubernetes Top 10 docs.google.com/forms/d/e/1F... . Thanks to all the people who have taken the time to contribute already!

docs.google.com

OWASP Kubernetes Top 10 2025 Survey

Kubernetes SIG Security Docs subproject is starting an update of the OWASP Kubernetes Top 10 and as such want to canvas ideas on what should be included. The goal of the Top 10 is to provide awarenes...

0136

Smarticu5 @smarticu5.bsky.social · 15/10/2025

Just under a week left until kcduk.io, hosted this year in beautiful Edinburgh. If you haven’t got a ticket yet, there are still some available. I can guarantee some excellent company and talks. Weather may vary, but the city’s still pretty in the drizzle.

kcduk.io

Kubernetes Community Days UK - Edinburgh 2025 | CNCF

In-person Event - Kubernetes Community Days UK - Edinburgh 2025

000

Smarticu5 @smarticu5.bsky.social · 15/10/2025

Good luck coming up with an effective keymap for that bad boy.

210

Reposted by Smarticu5

Joel Morris @gralefrit.bsky.social · 04/10/2024

This is just great.

49929

Reposted by Smarticu5

Michael O’Neill @michaeloneill.org · 25/09/2025

Please enjoy today, 25/9/2025, the last square date until 2116 (5^2/3^2/45^2).

7345151

Reposted by Smarticu5

Rory McCune @mccune.org.uk · 12/09/2025

My talk at @containerdays.bsky.social this week was on Kubernetes and post exploitation. I've had a couple of requests for a companion blog post, so here it is. The post looks at some things attackers might do in clusters they've compromised to retain access. raesene.github.io/blog/2025/09...

raesene.github.io

Beyond the surface - Exploring attacker persistence strategies in Kubernetes

0137

Smarticu5 @smarticu5.bsky.social · 01/09/2025

Completely agreed. It’s possible to do multi-tenancy securely, as long as you’re aware of the edge cases which look safe but aren’t. Having processes, monitoring, and guardrails in place helps hugely with not opening up new attack vectors.

011

Smarticu5 @smarticu5.bsky.social · 01/09/2025

Unsurprisingly, I have opinions about Kubernetes, particularly when it comes to multitenancy and how easy it is to break out of common deployments. Today I wrote about them for @amberwolfsec.bsky.social blog.amberwolf.com/blog/2025/se...

blog.amberwolf.com

Breaking Boundaries - Kubernetes Namespaces and multi-tenancy

AmberWolf Security Research Blog

1196

Reposted by Smarticu5

Patrick Vallely @pjvphotography.bsky.social · 28/08/2025

"Pat, why do you carry that ridiculous 600mm lens on long hikes?" Buddy, I can see mountains reflected in the eyes of a trailside pika.

Tighter crop of the same pika, focusing on its head.

An even tighter crop, focusing more on the pika's eye.

An extremely tight crop of the pika's eye, emphasizing their reflection of an early morning mountain scene.

6404366610930

Smarticu5 @smarticu5.bsky.social · 27/08/2025

www.stepsecurity.io/blog/supply-...

032

Smarticu5 @smarticu5.bsky.social · 25/08/2025

I’ve been considering making the switch from iPhone for a Pixel 10. Of course I managed to drop and smash the iPhone as soon as I’d clicked a trade in valuation.

010

Smarticu5 @smarticu5.bsky.social · 17/08/2025

Gutted to be missing this one!

000

Reposted by Smarticu5

David Flanagan @rawkode.bsky.social · 17/08/2025

Is your company hiring? Would I be useful to your team? I think I'm ready to open discussions for 2026. I still have commitments to finish over the next 6 months, but let's start talking. I'm in no rush and looking to find the right product / team / company. RTs appreciated

01217

Smarticu5 @smarticu5.bsky.social · 16/08/2025

The camera can also act as temporary glasses when the real glasses were sat down somewhere safe, and then apparently vanished from existence.

010

Smarticu5 @smarticu5.bsky.social · 21/06/2025

How did you not just melt in the heat!?

120

Reposted by Smarticu5

kcduk_io @kcduk.bsky.social · 07/05/2025

Give a talk at KCD Edinburgh! You don’t even have to be funny (but it helps). CFP here: kcduk.io

023

Smarticu5 @smarticu5.bsky.social · 18/05/2025

Heck yes, this is incredible!

030

Reposted by Smarticu5

kcduk_io @kcduk.bsky.social · 28/04/2025

Some say the learning curve for Kubernetes is steep. Try the walk up Calton Hill!

001

Smarticu5 @smarticu5.bsky.social · 28/04/2025

Some musings on the use of the “exec” directive in a kubeconfig, and how they might be useful to a red teamer or other nasty internet person: blog.iainsmart.co.uk/posts/kubect...

blog.iainsmart.co.uk

Kubectl Get Hacked

Discussing some ways kubeconfig files can bite

020

Smarticu5 @smarticu5.bsky.social · 02/04/2025

If anyone at #KubeConEU hasn't ever tried a Tunocks caramel wafer, hit me up. I'm travelling prepared.

151

Smarticu5 @smarticu5.bsky.social · 01/04/2025

If you're into variant sudoku, the daily from Cracking the Cryptic's discord is an excellent puzzle today. sudokupad.app/9f1izfy5tg

sudokupad.app

April 1, 2025: Big/Small/Odd/Even/Prime/Nonprime/Integer Sudoku by clover! (Sven's SudokuPad v0.590.0)

000

Smarticu5 @smarticu5.bsky.social · 01/04/2025

Gutted to only be at two days of #KubeCon this year. Flying down tomorrow for a swift 36 hours in London catching up with some wonderful people. /honk remotely to everyone already there!

120

Smarticu5 @smarticu5.bsky.social · 09/02/2025

Does anyone who follows me happen to run a blog or similar which they spellcheck with cspell, and have a custom dictionary of container/Linux words? Apparently the git repo I just ran it on has several hundred typos, but most of those are just "suid" or "containerd" or similar.

000

Smarticu5 @smarticu5.bsky.social · 17/01/2025

After CVE-2024-9042 dropped yesterday, I had a play about to see if I could reproduce the vuln. Spoiler alert, yes I could. I've just published some notes over on the @amberwolfsec.bsky.social blog blog.amberwolf.com/blog/2025/ja...

blog.amberwolf.com

Reproducing CVE-2024-9042: Command Injection in Windows Kubernetes Nodes

AmberWolf Security Research Blog

000

Smarticu5 @smarticu5.bsky.social · 12/01/2025

Securi-Tay tickets confirmed! That's a conference planned for Feb, March, and April.

020

Smarticu5 @smarticu5.bsky.social · 25/12/2024

Happy Christmas everyone! Does anyone know if the meeces ever got their cheeses?

000

Reposted by Smarticu5

Rory McCune @mccune.org.uk · 15/12/2024

Slides for the @bsideslondon.bsky.social container security workshop presented with @smarticu5.bsky.social and @marionmccune.bsky.social are here blog.iainsmart.co.uk/talks/BSides...

blog.iainsmart.co.uk

1228

Smarticu5 @smarticu5.bsky.social · 14/12/2024

Is "CAP_NET_BIND is a bit of root's power in the same way as Honor is a piece of Adonalsium" too niche to put in a presentation? Asking for a me.

110

Reposted by Smarticu5

AmberWolf @amberwolfsec.bsky.social · 26/11/2024

Today, AmberWolf released two blog posts and our tool "NachoVPN" to target vulnerabilities in major VPNs, including CVE-2024-29014 (SonicWall NetExtender SYSTEM RCE) and CVE-2024-5921 (Palo Alto GlobalProtect RCE and Priv Esc), after our SANS HackFest presentation.🧵

165

Smarticu5 @smarticu5.bsky.social · 16/11/2024

Ah, I was looking in the main settings not in notifications. Ty!

000

Smarticu5 @smarticu5.bsky.social · 16/11/2024

I was looking for this option this morning! Where is it?

100

Smarticu5 @smarticu5.bsky.social · 13/11/2024

Does anyone know of a way to point Ansible at multiple WSL environments to configure them individually? At the moment I'm running with a local connection type in each instance, which is a bit awkward.

141

Smarticu5 @smarticu5.bsky.social · 09/11/2024

Didn't realise SIG-Honk had reached Factorio.

020

Smarticu5 @smarticu5.bsky.social · 08/11/2024

I heard there are some particularly tricksy steps this year 😇

120

Reposted by Smarticu5

Kubernetes @kubernetes.io · 05/11/2024

Kubernetes is now on BlueSky! Tune in here for news about the project, straight from the contributor community! This account is owned and managed by the Contributor Comms subproject of SIG ContribEx: github.com/kubernetes/c...

18496140

Smarticu5 @smarticu5.bsky.social · 31/10/2024

Me: This script is inefficient, I wonder if I should make it faster. Script: Completes in 0.082 seconds Me: Huh, never mind.

000

Reposted by Smarticu5

Rory McCune @mccune.org.uk · 30/10/2024

The video for my KCD UK talk is up now. For this one I looked at how #Kubernetes security has improved a lot of the last 10 years, some of the spots we still need to be careful in, and talked about the "Unpatchable 4" CVEs in Kubernetes. youtu.be/ZbW4t-RgZp4?...

youtu.be

Charting the Course: The History and Evolution of Kubernetes Security | Rory McCune

YouTube video by Kubernetes Community Days UK

1192

Smarticu5 @smarticu5.bsky.social · 30/10/2024

“Don’t sleep on this amazing deal. Wait no. Do sleep on it.”

010

Smarticu5 @smarticu5.bsky.social · 29/10/2024

The slides would probably only be of limited use without me talking, but here's the blog the slides were based on: blog.iainsmart.co.uk/posts/2024-1...

blog.iainsmart.co.uk

Kubelet Mirror Pod Behaviours

Exploring edge-case in Kubernetes mirror pods and the Kubelet’s static manifests

010

Smarticu5 @smarticu5.bsky.social · 29/10/2024

Recording from my talk as DevSecCon London is up! youtu.be/nu4UY_vuCA8?.... The slides will be published as soon as I can bully mermaid.js into working in Puppeteer as part of my overcomplicated slide process.

youtu.be

Hack & Snack – Beer, Pizza & DevSecOps!

YouTube video by DevSecCon

100

Reposted by Smarticu5

Andrew Martin ⚡☸️ @sublimi.no · 24/10/2024

We're going to DevSecCon at Synk London! CP folk are talking about breaking all things K8s (Mr @smarticu5.bsky.social ), James Callaghan on "I Wanna Know what Trust is 🎵", and Antonio Juanilla from JPMC on "How attack and defend a Kubernetes cluster" 💥 www.meetup.com/devseccon-lo...

meetup.com

Hack & Snack – Beer, Pizza & DevSecOps!, Thu, Oct 24, 2024, 6:00 PM | Meetup

**Join Us for a Fun & Casual Tech Talk Meetup!** Hosted by **DevSecCon** & **ControlPlane** at the **Snyk Office** on **October 24th** 🍕 **Free Pizza & Beer!** 🍻 This is

063