Hacker, coffee drinker, film watcher. Former secretary of @AbertayHackers, now I break into containers and pipelines for @controlplaneio
In a cluster stealing secrets
Joined June 2009
- Tweets2.9K
- Following849
- Followers921
- Likes3.7K
That 'Project Hail Mary' trailer really does come out swinging with spoilers for the book's plot twists in the first 10 seconds, huh?
Iain Smart retweeted
I was about to celebrate and say that everyone has behaved when booking tickets, but then found the one who hadn't paid attention to the rules.
Those tickets have been cancelled and so that puts back on sale a Playing with Pipelines ticket if anyone was after one.
That CI workshop thingy looks particularly fun.
We have a list of all our speakers and workshop who have confirmed so far up on our site:
steelcon.info/the-event/talk…
steelcon.info/the-event/work…
If any of these excite you (they excite us) then the last ticket drop will be this Friday, May 2nd.
ti.to/steelcon/2025
Digging into how the latest Windows Kubernetes vuln works was a fun way to spend a couple of hours. We've just published some of my notes here: blog.amberwolf.com/blog/2025…
Iain Smart retweeted
The Kubernetes Security Response Committee has published an advisory for CVE-2024-9042, affecting Windows worker nodes querying the /logs endpoint.
Iain Smart, Principal Security Consultant at AmberWolf, reproduced the issue & shared detection insights in our latest blog.
Iain Smart retweeted
Today, we're releasing NachoVPN, our VPN client exploitation tool, as presented at SANS #HackfestHollywood 2024 🌮🔒
Find the details on the @AmberWolfSec blog, along with the individual advisories, including a not-yet-fully fixed PaloAlto GlobalProtect client RCE👀
Iain Smart retweeted
🗓️SAVE THE DATE!🗓️
The 13th edition of Securi-Tay will be happening on the 28th of February 2025
I'll be running one of @controlplaneio's CTF scenarios at Cloud Native and Kubernetes Edinburgh this Wednesday (18th) at 18:00. Bring a laptop, hack some chatbots, get some flags! Also probably pizza. meetup.com/cloud-native-kube…
If I'm reading the email right, Docker Pro just went from $5/mo to $9/mo and now gets you less than it used to. Admittedly I probably have ~200 image pulls per YEAR so nowhere near the limits, but a doubling of price will probably have me moving from Docker Hub and Desktop soon.
Iain Smart retweeted
Carrying on Datadog's #Kubernetes #security video series, by starting to take a look at how Kubernetes handles authentication. In this video we're looking at some of the possible pitfalls with client certificate authentication.
youtube.com/watch?v=2setap7I…
Iain Smart retweeted
A customer reached out asking for video tutorials.
We obviously have a Lindy handling this, and I was delighted to see that she sent a video.
But then I remembered we don't have a video tutorial and realized Lindy is literally fucking rickrolling our customers.
Another excellent set of challenges from @CtfSecurity. Just got to work out their magical mystery bonus flag now.
Good Morning #defcon32! Registration is still open for the DC Kubernetes CTF. The non-competitive Learning CTF runs Friday and Saturday. The competitive CTF runs Saturday. The Learning CTF will start soon. More information can be found at containersecurityctf.com/
Iain Smart retweeted
Kicking off tonight’s Cloud Native Edinburgh with the first talk courtesy of Kate Gawron from @doitint
Happy @Steel_Con day to everyone who celebrates! Gutted to be missing it this year, I’ll wave on the way past.
Iain Smart retweeted
ALT A cartoon from the webcomic XKCD. A teetering piles of bricks of different sizes representing 'all modern digital infrastructure'. At the bottom right an arrow points to a small brick supporting the whole structure: 'A project some random person in Nebraska has been thanklessly maintaining since 2003'.