Ian Coldwater
where else to find them
what they talk about
all 5 in the filters
where they keep going back
- KubeCon + CloudNativeCon North America3 editions2019–2021
- KubeCon + CloudNativeCon Europe3 editions2019–2025
all 6 in the filters
on a stage with
all 10 in the filters
who talks about the same things
- Rory McCune18 talks
- Brad Geesaman8 talks
- Duffie Cooley18 talks
- Greg Castle7 talks
- Andrew Martin50 talks
- Jimmy Mesta7 talks
| title | conference | date |
|---|---|---|
| Hot Takes: Kubernetes Paintainers Bring the Heat | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Kubernetes maintainers describe concrete wins and pain points: adoption churn from the Docker shim deprecation that forced long migrations and prompted… | ||
| Kubernetes Exposed! Seven of Nine Hidden Secrets That Will Give You Pause | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Kubernetes defaults bite: individual TLS certs can’t be revoked so you must rebuild CA chains; Kubernetes disables Docker’s seccomp defaults unless cluster and… | ||
| Security Through Transparency: Kubernetes SIG Security Update | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Kubernetes SIG Security reports concrete outputs: prowjobs every six hours scan build-time dependencies and release images for vulnerabilities; a programmatic… | ||
| Exploiting a Slightly Peculiar Volume Configuration with SIG-Honk | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
A hacker crew reads CVE-2021-30465 in runc, builds a proof-of-concept exploit that uses an emptyDir symlink race during volume mount to win a TOCTOU and mount… | ||
| Bring Your Gifts | devopsdays Minneapolis 2021 | 2021-07-20 |
Shows a concrete community model built at George Floyd Square that replaces police response with neighbor-led systems, documents 24 demands and organizes… | ||
| We Didn’t Start the Fire: Communication Breakdowns and How to Preven... | KubeCon + CloudNativeCon Europe 2021 | 2021-05-04 |
History of Kubernetes breaking changes shows concrete failures and fixes: v1beta1 API removals in 1.16 leave many clusters stuck on 1.15 outside patch support… | ||
| SIG-Honk AMA Panel: Hacking and Hardening in the Cloud Native Garden | KubeCon + CloudNativeCon North America 2020 Virtual | 2020-11-17 |
Explains practical red-team and blue-team tactics: start with external network and API-server audit logs, scan configs and cloud credentials, and hunt for… | ||
| The Path Less Traveled: Abusing Kubernetes Defaults | Cloud Native Security Day 2019 | 2019-11-18 |
Default kubeadm clusters expose real, actionable attack paths: deploy a pod that mounts hostPath & /var/run/docker.sock to control the host Docker daemon; pull… | ||
| Keynote: Hello From the Other Side: Dispatches From a Kubernetes Attacker | KubeCon + CloudNativeCon North America 2019 | 2019-11-18 |
Attackers treat a cluster as a graph and commonly enumerate permissions with kubectl auth can-i, map relationships with Octant, and probe admission… | ||
| The Path Less Traveled: Abusing Kubernetes Defaults | Black Hat USA 2019 | 2019-08-03 |
Live demos exploit common defaults: using sigs.k8s.io/kind (kubeadm-backed) to direct-schedule a pod onto the control plane and read etcd, extract a… | ||
| Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105 | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
CVE-2018-1002105 allows specially crafted connection upgrade WebSocket requests to bypass the API server and speak directly to backends, enabling both… | ||
| Practical Ghostbusting: Meltdown, Spectre and You | NDC Minnesota 2018 | 2018-05-07 |
Explains how Meltdown breaks hardware isolation by exploiting out‑of‑order execution and cache timing to read kernel and DRAM one byte at a time, while Spectre… | ||
| nothing matches | ||