Eric Smalling
where else to find them
github:ericsmalling
mastodon:@ericsmalling@hachyderm.io
linkedin:ericsmalling
speakerdeck:ericsmalling
devto:ericsmalling
what they talk about
where they keep going back
no series more than once — all 5 in the filters
on a stage with
- Alba Ferri Fitóonce
who talks about the same things
- Ian Coldwater19 talks
- Duffie Cooley18 talks
- Rory McCune18 talks
- Greg Castle7 talks
- Brad Geesaman8 talks
- Maya Kaczorowski15 talks
| title | conference | date |
|---|---|---|
| Tutorial: Hands-on Hacking Kubernetes and Ways to Prevent It | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Walks through exploiting a contrived Python remote code execution to steal a mounted service account token, use curl and kubectl (via kind 1.24 on Docker… | ||
| Closing Remarks | Cloud Native SecurityCon North America 2022 | 2022-10-24 |
Brief rundown of what actually happened today: sponsors get called out and a free beer reception is confirmed downstairs; a recurring conference bingo card… | ||
| Vanquishing Vulnerabilities in Valencia | Cloud Native SecurityCon Europe 2022 | 2022-05-16 |
A live Log4Shell RCE demo shows a crafted JNDI/LDAP payload giving a reverse shell into a Tomcat pod (netcat listener), exposing Kubernetes env vars and a… | ||
| So. Many. Vulnerabilities. Why are containers such a mess... | DevOpsDays Boston 2021 | 2021-09-27 |
Explains why most vulnerabilities come from base images and not app code, shows concrete examples: a one‑gig Ruby image with ~35 high severities, a scan… | ||
| Tutorial: Hack My Mis-Configured Kubernetes | Open Source Summit + Embedded Linux Conference + OSPOCon 2021 | 2021-09-27 |
A vulnerable web app with remote command execution exposes environment variables, letting an attacker read the auto-mounted service account token, curl the… | ||
| nothing matches | ||