🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Here's the slides from the #Shmoocon talk I did with Jay Beale Kubernetes security priorities. It has a cluster exploit demo, TOCTOU stuff, and a tool I wrote to visualize seccomp profiles. Please share in your circles if you appreciate the effort.😓 canva.com/design/DAGZrMS…

Heading back to DC soon to teach #Kubernetes Attack & Defense again Black Hat Spring trainings. Class is >50% hands-on, w step-by-step labs! Students get computers to keep w CTF K8S clusters to #hack, get flags & break their attacks. Come join us! blackhat.com/tr-25/training…

Photos lost to time - such good memories of awesome people.

I'll be teaching #Kubernetes Attack & Defense at Black Hat Spring trainings. Class is >50% hands-on, w step-by-step labs! Students get a laptop to keep w CTF K8S clusters to #hack, get flags & break their attacks. Promo code TRAIN300 gets you $300 off!

If you ever think there are no more bugs left to find… this Linux kernel bug was just patched yesterday and existed for 5 YEARS

“Find a job you love and you will never have to work a day in your life.” ☺️

People asked me what my sleep routine is like since I've worked hard at optimizing it. I treat my body like a system. I've debugged, refactored, and hardened my sleep script. 🧵 My sleep metrics from the last week. I'm not perfect. I'm still improving. But this is what I do.

Anyone using Kubernetes at your company? You should strongly consider this class, if so. Jay does a fantastic job outlining the realistic risks and defenses, with lots of actionable take-away lessons.

2008: Several DNS vendors released patches to mitigate an attack method discovered by Dan Kaminsky which could be used to cause DNS cache poisoning. Kaminsky had discovered the vulnerability 6 months prior and reported it to vendors privately so they could address it. RIP, Dan.

Another fun fact: This vulnerability was one that helped me launch Microsoft Vulnerability Research (MSVR), the first major software vendor multiparty vulnerability coordination process & 3rd party vuln research & reporting process. Google Project Zero followed ~7 years later.

So many people have learned so much in Justin’s classes both at Black HAt and SANS. He is a really great teacher.

So excited to teach Kubernetes Attack and Defense in August at Black Hat #BlackHat!

Julian was incredibly smart, creative AF, & so driven. He was really generous w his time, mentoring when I was a teenager at Bethesda-he was the technical and creative lead at the beginning. He had even been in a electro-pop band in Denmark. Shocked that he's gone so early.