zelivans

6 ms·

1.
Ask HN: Why does the CA Pay Transparency Law only address base pay?
1 points by zelivans 4y ago|0 comments
2.
FabricScape: Escaping Service Fabric and Taking over the Cluster(unit42.paloaltonetworks.com)
1 points by zelivans 4y ago|0 comments
3.
New Linux vulnerability affecting cgroups: can containers escape?(unit42.paloaltonetworks.com)
123 points by zelivans 5y ago|82 comments
4.
by zelivans 6y ago
Unfortunately these days it is really difficult, borderline impossible to control what images of you are uploaded to the internet. This is discussed in the "Real World Limitations" section of the paper. Even assuming you have no i
5.
by zelivans 7y ago
Any context as to why the tweet was deleted?
6.
Non-root containers, Kubernetes CVE-2019-11245 and why you should care(twistlock.com)
8 points by zelivans 7y ago|1 comments
7.
Golang fuzzing found a vulnerability in NATS server(twistlock.com)
2 points by zelivans 7y ago|0 comments
8.
Vulnerabilities found in rkt still open(twistlock.com)
1 points by zelivans 7y ago|0 comments
9.
Palo Alto Networks acquires Twistlock for $410M(techcrunch.com)
1 points by zelivans 7y ago|0 comments
10.
by zelivans 7y ago
This. Plus, can it really be referred to as a "study" with just three test subjects?
11.
Disclosing a directory traversal vulnerability in Kubernetes copy(twistlock.com)
14 points by zelivans 8y ago|4 comments
12.
Breaking Out of Docker via RunC(twistlock.com)
116 points by zelivans 8y ago|20 comments
13.
Demystifying Kubernetes CVE-2018-1002105 (and a dead simple exploit)(twistlock.com)
5 points by zelivans 8y ago|0 comments
14.
Buffer Overflows in QEMU: Disclosing Four New CVEs(twistlock.com)
2 points by zelivans 8y ago|0 comments
15.
Jenkins GitHub Pull Request Builder Vulnerability (CVE-2018-1000142)(twistlock.com)
3 points by zelivans 8y ago|0 comments
16.
Dear Developers, Beware of DNS Rebinding: DNS Rebinding and CSRF with Etcd(twistlock.com)
5 points by zelivans 9y ago|3 comments
17.
by zelivans 9y ago
Yes absolutely. Whew. Updated my comment accordingly, thanks.
18.
by zelivans 9y ago
Hi, I'm the author of the article. To stress your point, there really are so many embedded devices using Busybox, and most of them were never designed to be updated (or nobody cares enough to update them). Also I never got to fuzzing n
19.
CVE-2017-16544: A Busybox autocompletion vulnerability(twistlock.com)
49 points by zelivans 9y ago|14 comments
20.
by zelivans 9y ago
Go for it, and report back!
21.
Exploiting Alpine Linux(twistlock.com)
91 points by zelivans 9y ago|22 comments
22.
Exploitable buffer overflows found in apk (Alpine Linux's package manager)(twistlock.com)
19 points by zelivans 9y ago|0 comments