Brad Geesaman
where else to find them
github:bgeesaman
bluesky:bradgeesaman.com
what they talk about
where they keep going back
- KubeCon + CloudNativeCon North America4 editions2017–2021
on a stage with
all 6 in the filters
who talks about the same things
- Ian Coldwater19 talks
- Rory McCune18 talks
- Greg Castle7 talks
- Duffie Cooley18 talks
- James Cleverley-Prance3 talks
- Andrew Martin50 talks
| title | conference | date |
|---|---|---|
| Kubernetes Exposed! Seven of Nine Hidden Secrets That Will Give You Pause | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Kubernetes defaults bite: individual TLS certs can’t be revoked so you must rebuild CA chains; Kubernetes disables Docker’s seccomp defaults unless cluster and… | ||
| Exploiting a Slightly Peculiar Volume Configuration with SIG-Honk | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
A hacker crew reads CVE-2021-30465 in runc, builds a proof-of-concept exploit that uses an emptyDir symlink race during volume mount to win a TOCTOU and mount… | ||
| SIG-Honk AMA Panel: Hacking and Hardening in the Cloud Native Garden | KubeCon + CloudNativeCon North America 2020 Virtual | 2020-11-17 |
Explains practical red-team and blue-team tactics: start with external network and API-server audit logs, scan configs and cloud credentials, and hunt for… | ||
| Tutorial: Attacking and Defending Kube... | KubeCon + CloudNativeCon North America 2019 | 2019-11-18 |
Hands-on lab shows a real GKE cluster compromise: an exposed dashboard web shell gives a foothold, kubectl and curl enumerate the environment, then nsenter… | ||
| Hacking and Hardening Kubernetes Clusters by Example [I] | KubeCon + CloudNativeCon North America 2017 | 2017-12-06 |
Live-recorded demos show how a container shell plus five curl/bash commands and a mounted default service account token or an exposed kubelet can dump secrets… | ||
| nothing matches | ||