· Containers
When LIST is a Lie in Kubernetes
I’m writing about the Kubernetes API’s use of the “LIST” verb it controls access to Secrets in a cluster. I’ve seen way too may environments, tools, templates, and examples that are hoping …
research · 01 Nov 2020
Linux
· Containers
Keyctl-unmask: "Going Florida" on The State Of Containerizing Linux Keyrings
TL;DR The Linux Kernel keyring is known to be a security issue for containers Download my tool for breaking out of a container to steal all the host keys here: keyctl-unmask We can use this in Kubernetes to steal all …