#security - December 2018 | Slack Archive

security

29 messages

Archive: https://archive.sweetops.com/security/

Nov 2018

December 2018

Jan 2019

Andriy Knysh (Cloud Posse)almost 8 years ago

https://www.theverge.com/2018/12/3/18124849/quora-100-million-user-hack-name-email-messages

Erik Osterman (Cloud Posse)almost 8 years ago

this is neat: https://privacy.com/

Erik Osterman (Cloud Posse)almost 8 years ago

https://www.hashicorp.com/blog/vault-1-0

Erik Osterman (Cloud Posse)almost 8 years ago

@antonbabenko auto unseal has arrived

joshmyersalmost 8 years ago

About time.

antonbabenkoalmost 8 years ago

Beautiful

Andriy Knysh (Cloud Posse)almost 8 years ago

Danalmost 8 years ago

lololol

Erik Osterman (Cloud Posse)almost 8 years ago

https://news.ycombinator.com/item?id=18612571

Erik Osterman (Cloud Posse)almost 8 years ago

gravitational guys have reproduced the kubernetes exploit

Erik Osterman (Cloud Posse)almost 8 years ago

https://github.com/mumoshu/falco-operator

Erik Osterman (Cloud Posse)almost 8 years ago

https://sweetops.slack.com/archives/CCT1E7JJY/p1545257952030200

Binaryburnalmost 8 years ago

https://www.zdnet.com/article/thousands-of-jenkins-servers-will-let-anonymous-users-become-admins/

Erik Osterman (Cloud Posse)almost 8 years ago

oh joy!

Erik Osterman (Cloud Posse)almost 8 years ago

just something in time for the holidays... a gift to the spammers & scammers for christmas

sarkisalmost 8 years ago

yea, great timing...

Erik Osterman (Cloud Posse)almost 8 years ago

https://alestic.com/2018/12/aws-ssm-parameter-store-git-key/

Erik Osterman (Cloud Posse)almost 8 years ago

Nice trick

Erik Osterman (Cloud Posse)almost 8 years ago

https://geeks.uniplaces.com/tips-and-tricks-for-aws-ssm-parameter-store-with-confd-f0bf066005fd

Erik Osterman (Cloud Posse)almost 8 years ago

And then using this pattern with Kubernetes https://www.bitservices.io/blog/confd-kubernetes/

mrwackyalmost 8 years ago

Are k8s secrets still unencrypted in etcd?

mrwackyalmost 8 years ago

and not at all secret?

Erik Osterman (Cloud Posse)almost 8 years ago

they are encrypted at rest in etcd

mrwackyalmost 8 years ago

that seems new since I last looked (1+ year ago)

Erik Osterman (Cloud Posse)almost 8 years ago

though I guess it depends on your k8s implementation

Erik Osterman (Cloud Posse)almost 8 years ago

https://github.com/cloudposse/geodesic/blob/master/rootfs/templates/kops/default.yaml#L92-L95

Erik Osterman (Cloud Posse)almost 8 years ago

here’s the setup in kops manifest

Erik Osterman (Cloud Posse)almost 8 years ago

Also see: https://sweetops.slack.com/archives/CBW699XE0/p1545026602047500?thread_ts=1545025932.043500&cid=CBW699XE0

Erik Osterman (Cloud Posse)almost 8 years ago

https://blog.cloudflare.com/using-cloudflare-workers-to-identify-pwned-passwords/

November 2018 Browse by date January 2019