Rory McCune
where else to find them
website:https://www.mccune.org.uk
github:raesene
bluesky:mccune.org.uk
mastodon:@raesene@infosec.exchange
x:raesene
linkedin:rorym
what they talk about
all 4 in the filters
where they keep going back
- KubeCon + CloudNativeCon Europe3 editions2018–2025
- KubeCon + CloudNativeCon North America2 editions2020–2021
all 7 in the filters
on a stage with
all 9 in the filters
who talks about the same things
- Ian Coldwater19 talks
- Tabitha Sable13 talks
- Brad Geesaman8 talks
- Jimmy Mesta7 talks
- Duffie Cooley18 talks
- Andrew Martin50 talks
| title | conference | date |
|---|---|---|
| Tutorial: Hacking up a Storm With Kubernetes | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Hands-on lab builds a local kind cluster, applies supplied manifests and shows how a mis-scoped service account token + kubectl exec lets a developer create a… | ||
| SIG Security: Succession Pla ... | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Kubernetes SIG Security runs an official CVE feed (JSON + RSS), operates a HackerOne bounty and a third-party audit program (2018, 2021, now 2025 third-party… | ||
| Fortifying Kubernetes | KCD Austria 2024 | 2024-10-08 |
Practical checklist for securing clusters: choose managed vs unmanaged with eyes open (managed may not even let you enable Kubernetes audit logs), enforce… | ||
| Informing Cloud Native Vulnerability Management: Some Views from the Past | Global Security Vulnerability Summit @ Open Source Summit North America 2022 | 2022-06-23 |
Argues for auditability and openness: use grype and trivy so results can be inspected and differences explained; treat appliances and SaaS as black boxes that… | ||
| First Steps to Full Lifecycle Security with Open Source Tools | Cloud Native SecurityCon Europe 2022 | 2022-05-16 |
Hands-on demos use Trivy to scan container images, GitHub repos, Dockerfiles, Kubernetes manifests and Terraform, showing JSON output, jq filtering for a CVE… | ||
| Too Much to Choose – Making Sense of a Smorgasbord of Security Standard | KubeCon + CloudNativeCon Europe 2022 | 2022-05-16 |
Compares concrete standards: CIS Benchmark (checks are prescriptive, target kubeadm/AKS/EKS/GKE/OpenShift and specific k8s versions like 1.20/1.23), NSA… | ||
| Cluster Wrangling: How to make Kubernetes clusters secure and usable | Global AppSec US 2021 Virtual | 2021-11-08 |
Claim: many clusters are exposed and misconfigured — a census finds ~900,000 clusters on the internet, ~100,000 kubelets and ~5,000 etcd exposed, and 25% run… | ||
| Exploiting a Slightly Peculiar Volume Configuration with SIG-Honk | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
A hacker crew reads CVE-2021-30465 in runc, builds a proof-of-concept exploit that uses an emptyDir symlink race during volume mount to win a TOCTOU and mount… | ||
| SIG-Honk AMA Panel: Hacking and Hardening in the Cloud Native Garden | KubeCon + CloudNativeCon North America 2020 Virtual | 2020-11-17 |
Explains practical red-team and blue-team tactics: start with external network and API-server audit logs, scan configs and cloud credentials, and hunt for… | ||
| A Hacker's Guide to Kubernetes and the Cloud | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Attack paths and fixes framed from an attacker’s view: unauthenticated etcd and kubelet access lets an attacker download cluster secrets (the presenter finds… | ||
| Security And Modern Software Deployment | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
Shows that piping a fetched shell script into sh (so‑called curl bashing) actually hands root or install‑time power to many parties; package managers run… | ||
| nothing matches | ||