Marina Moore
where else to find them
no profile links on file
what they talk about
all 9 in the filters
where they keep going back
- KubeCon + CloudNativeCon North America3 editions2019–2022
- KubeCon + CloudNativeCon Europe2 editions2025–2026
- CloudNativeSecurityCon North America2 editions2023–2024
all 16 in the filters
on a stage with
all 26 in the filters
who talks about the same things
- Justin Cappos23 talks
- Joshua Lock12 talks
- Santiago Torres-Arias14 talks
- Lukas Puehringer4 talks
- Kairo De Araujo5 talks
- Michael Lieberman36 talks
| title | conference | date |
|---|---|---|
| Tarmageddon: One Bug, Four Forks, and a Disclosure Scavenger Hunt | Open Source SecurityCon Europe 2026 | 2026-03-23 |
Discovery of a parsing bug in tokio-tar called Tarmageddon reveals a PAX header parsing flaw that lets an unpacker treat embedded data as files and enables… | ||
| A Maintainer’s Tour Of Tag Security And Compliance | KubeCon + CloudNativeCon Europe 2026 | 2026-03-23 |
TAG Security and Compliance runs self-assessments for early-stage projects and joint assessments that include code review and concrete remediation guidance… | ||
| Welcome + Opening Remarks | Open Source SecurityCon North America 2025 | 2025-11-10 |
Welcome notes outline logistics and community work: three simultaneous rooms, lunch at Hall B1, reception at 5:30, sponsors Changard Docker Red Hat Minimus… | ||
| Closing Remarks | Open Source SecurityCon North America 2025 | 2025-11-10 |
Conference returns after a pause and highlights cross‑track learning and community rebuilding, with three diamond sponsors: Changard, Docker, Red Hat, plus… | ||
| Keynote: Meet the New Technic... | CNCF Maintainer Summit North America 2025 | 2025-11-09 |
Conference announces TAG restructuring and lists concrete initiatives: a Developer Experience TAG builds guidelines for the CNCF landscape and an OCI-compliant… | ||
| Pathways, Not Roadblocks: TAG‑Led Guardrails for Sustainable, High‑Impa... | CNCF Maintainer Summit North America 2025 | 2025-11-09 |
CNCF reorganizes eight TAGs into five TAGs (Infrastructure, Security & Compliance, Operations & Reliability, Workload Foundations, Developer Experience) and… | ||
| You Can’t Handle the Root! Container Isolation... | KCD SF Bay Area 2025 | 2025-09-09 |
Container isolation is a spectrum of concrete tradeoffs and tools: kernel features like namespaces, cgroups, seccomp give strong baseline protection with zero… | ||
| Your Containers Aren’t Alone: Demystifying Container Isolation | Open Source Summit Europe 2025 | 2025-08-25 |
Surveys concrete isolation layers and tradeoffs: namespaces and cgroups give low‑overhead process separation but kernel CVEs let containers mount or rewrite… | ||
| Your Containers Aren’t Alone: Demystifying Container Isolation | Open Source Summit Europe 2025 | 2025-08-25 |
Compares concrete isolation options, their overheads and threat models, and when each actually prevents cross-tenant access: lightweight kernel features like… | ||
| TUF-en up Your Software Supply Chain | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Explains how TUF prevents replay and tampering by layering metadata (root.json, snapshot, timestamp) and multi‑sig root keys and shows a live flow: ingest… | ||
| A Project Maintainers Guide To TAG Security | CNCF Maintainer Summit Europe 2025 | 2025-03-31 |
TAG Security runs metric-driven activities: a Security Slam with five badges and curated issues, and project self-assessments plus optional joint assessments… | ||
| TOC Project Reviews WG: Let's Work on It Together! | CNCF Maintainer Summit Europe 2025 | 2025-03-31 |
The Project Reviews WG lays out concrete review stages with checklists for Day Zero (architecture and UX), Day One (install, config, rollback, enablement) and… | ||
| Keynote: A Vision for a Secure Software Supply Chain | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
Sixty‑one percent of businesses report a supply‑chain hit (Gartner), and concrete incidents include a malicious backdoor in XZ packages, Dependabot… | ||
| Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain | SupplyChainSecurityCon @ OSS NA 2023 | 2023-05-10 |
Software supply chain compromises rise 742% over three years and the claim is that combining TUF and in-toto gives verifiable end-to-end integrity. The demo… | ||
| Not All That’s Signed Is Secure: Verify the Right Way with TUF and... | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Signatures only protect you if verification checks who signed and what they actually claim; a registry can return a valid signature from evil@hacker.com and it… | ||
| Closing: "And, That's a wrap!" | Cloud Native SecurityCon North America 2022 | 2022-10-24 |
Closing recap lists concrete outcomes: the CTF runs across 50 clusters, 80 flags, 11 hints, 560 total points with 74 flag submissions and tightly fought… | ||
| TUF-En Up Your Signatures | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
TUF is a compromise‑resilient update framework used by sigstore, Notary and Google Fuchsia that limits damage when repositories or signing keys are breached… | ||
| Staring Into the Abyss With the Security Technical Advisory Group | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Security TAG explains its charter, runs biweekly meetings with work tracked on GitHub, and performs security assessments and joint reviews to help projects… | ||
| TUF Maintainer Panel Discussion | Cloud Native SecurityCon Europe 2022 | 2022-05-16 |
TUF has working implementations in python, go, rust and is already used by organizations like Datadog, AWS BottleRocket, Google Fuchsia and Sigstore; the… | ||
| Cryptographic Signatures: A Building Block Not A Panacea | Cloud Native Security Conference North America 2021 | 2021-10-12 |
Cryptographic signatures guarantee only that a particular private key signed an artifact at a point in time and require surrounding policies to be meaningful… | ||
| Whose Sign Is It Anyway? | SupplyChainSecurityCon North America 2021 | 2021-10-11 |
A valid signature only proves a private key and data coexisted once; meaning comes from policy that maps keys to identities, decides key storage, and defines… | ||
| Securing Content Repositories with the Update Framework (TUF) | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Explains how TUF guarantees freshness, consistency and integrity using cryptographic signatures, short-expiry timestamps, role separation, threshold keys and… | ||
| Software Supply Chain Integrity with Sigstore | Supply Chain Town Hall 2021 | 2021-08-18 |
Sigstore provides a concrete pipeline: cosign (now at 1.0) generates ephemeral keys, signs container images or arbitrary files and stores signatures alongside… | ||
| Beyond signatures: Using TUF and Notary to Secure Software Distribution | Cloud Native Security Day Europe 2021 | 2021-05-04 |
Adapts The Update Framework into a registry-focused implementation and a Notary v2 adaptation that aims to survive server and some key compromises; implements… | ||
| Using TUF to Mitigate Repository Compromises | KubeCon + CloudNativeCon North America 2019 | 2019-11-18 |
TUF (The Update Framework) presents a concrete design to limit damage from repository compromises by using threshold signatures, periodic root key rotation… | ||
| nothing matches | ||