Jason Shepherd (@jazinner) profile picture

Jason Shepherd

@jazinner

OpenShift Security, White/Red Hat Hacker, Red Hat Employee

 Brisbane
about.me/jason.shepherd
Joined April 2009
  • Tweets175
  • Following108
  • Followers89
11Media
Photo by Jason Shepherd (@jazinner)Photo by Jason Shepherd (@jazinner)Photo by Jason Shepherd (@jazinner)Photo by Jason Shepherd (@jazinner)Photo by Jason Shepherd (@jazinner)Photo by Jason Shepherd (@jazinner)Photo by Jason Shepherd (@jazinner)
Jason Shepherd, Red Hat's Principal Software Engineer, writes about container image vulnerabilities and how you can use Clair to scan container images for vulnerabilities. Learn more here red.ht/3QFPZ9R #security #redhat
Scanning container image vulnerabilities with Clair

Scanning container image vulnerabilities with Clair

Scan container images for vulnerabilities with Clair: Strengthen container security for Red Hat products

redhat.com
5
9
Network Based Security in a Cloudy World jasonshepherd.net/2021/10/01…
Network Based Security in a Cloudy World

Network Based Security in a Cloudy World

I recently needed to authenticate to a service which required that I not only have a secret, but also that I come from a certain host. This became a real problem for me because I wasn’t sure where …

jasonshepherd.net
Product Security vulnerability article for the CVE-2021-30465: runc container sandbox escape. access.redhat.com/security/v…
RHSB-2021-004 Symlink-Exchange attack - runc - (CVE-2021-30465) | Red Hat Customer Portal

RHSB-2021-004 Symlink-Exchange attack - runc - (CVE-2021-30465) | Red Hat Customer Portal

Access Red Hat’s knowledge, guidance, and support through your subscription.

access.redhat.com
Red Hat OpenShift (@openshift) profile pictureRed Hat OpenShift
@openshift3 Jun 2021
Security is important to every company. But CVEs happen. Is your Kubernetes platform secure by default? Red Hat OpenShift is. openshift.com/blog/cve-2021-…

CVE-2021-30465 Mitigated by Default in OpenShift

The recently announced exploit for runc is mitigated by default in OpenShift.

redhat.com
1
1
Red Hat improves the usability and security of container image short names redhat.com/sysadmin/containe… Thanks @raesene @bradgeesaman for reporting these issues.

Container image short names in Podman

When people approach me to talk about Podman and containers, I usually ask if they are familiar with Docker. Most people are, and the conversations quick...

redhat.com
1
2
7
Jason Shepherd retweeted
Vincent Danen (@vdanen) profile picture
Vincent Danen@vdanen2 Oct 2020
If you are passionate about #openshift #security, the OpenShift SRE team is looking for a Senior Site Reliability Engineer in Australia (Remote). Learn more here: social.icims.com/viewjob/pt1… #RedHat
1
2
Kubernetes Security Event by Red Hat this week: redhat.brighttalk.live/summi…
Jason Shepherd retweeted
Vincent Danen (@vdanen) profile picture
Vincent Danen@vdanen21 Apr 2020
Good PSA for awareness of the dangers by ⁦@RedHatSecurity⁩’s own ⁦@jazinner⁩ . 👍 redhat.com/en/blog/be-carefu…
Be careful when pulling images by short name

Be careful when pulling images by short name

If you're pulling Linux container images by their "short name" you may be at risk. This post explains how to use the fully qualified name to get the images you need.

redhat.com
4
5
Be careful when pulling container images by short names redhat.com/en/blog/be-carefu…
Be careful when pulling images by short name

Be careful when pulling images by short name

If you're pulling Linux container images by their "short name" you may be at risk. This post explains how to use the fully qualified name to get the images you need.

redhat.com
1
1
Deploying Operators Security with OpenShift Container Platform: redhat.com/en/blog/kubernete…
With Kubernetes Operators comes great responsibility

With Kubernetes Operators comes great responsibility

In this post we explore safe ways to deploy Operators to Openshift 4.x using OperatorHub, OLM and scoping rules for Operators.

redhat.com
1
1
Jason Shepherd retweeted
Vincent Danen (@vdanen) profile picture
Vincent Danen@vdanen9 Mar 2020
The @RedHat 2019 Product Security Risk Report is now available: redhat.com/en/resources/prod…
16
1
12
Jason Shepherd retweeted
Brad Geesaman (@bradgeesaman) profile picture
Brad Geesaman@bradgeesaman29 Feb 2020
If you want to see some things that can happen when attackers actually understand K8s, Here’s our (@IanColdwater and I) #RSAC2020 talk, “Advanced Persistence Threats: the Future of Kubernetes Attacks” youtube.com/watch?v=CH7S5rE3…
Advanced Persistence Threats: The Future of Kubernetes Attacks

Advanced Persistence Threats: The Future of Kubernetes Attacks

Ian Coldwater, Lead Platform Security Engineer, SalesforceBrad Gee...

youtube.com
1
35
4
147
OpenShift build integrity during install and upgrade jasonshepherd.net/2020/03/03… via @jazinner
OpenShift build integrity during install and upgrade

OpenShift build integrity during install and upgrade

How Red Hat deliver OpenShift Container Platform 4 Red Hat have made improvements in the way they deliver installer, client binaries, and container images for OpenShift Container Platform 4. As you…

jasonshepherd.net
1
2
OpenShift build integrity during install and upgrade jasonshepherd.net/2020/03/03…
Image from Jason Shepherd (@jazinner)
1
Last chance to get my video JBoss EAP Configuration, Deployment, and Administration [Video] from @PacktPub for just $5: packtpub.com/application-dev…
Free Julian Assange, before it's too late. STOP USA EXTRADITION - Sign the Petition! chng.it/2LhVCFPm via @ChangeAUS
797,109 people signed and won this petition

797,109 people signed and won this petition

Free Julian Assange, before it's too late. Sign to STOP the USA Extradition.

change.org
Jason Shepherd retweeted
Red Hat OpenShift (@openshift) profile picture
Red Hat OpenShift
@openshift4 Jun 2019
OpenShift 4 bits are now GA and available for download. access.redhat.com/announceme…
2
134
18
194
Jason Shepherd retweeted
Katie Ots (@katiejots) profile picture
Katie Ots@katiejots31 May 2019
Train driver just asked two questions about this day in history over the PA, adding: "Don't Google - try to work it out. The aim is for people to talk to each other, before we lose that lovely art." Love the idea, although folks are still staring at their devices. #britishrail
1
1
6
Jason Shepherd retweeted
Stacy Doster (@stacydoster) profile picture
Stacy Doster@stacydoster4 Jun 2019
Join the @RedHat #SecuritySymposium to learn the latest upstream and enterprise security developments. redhat.com/en/events/securit… #RedHat #Seattle #security #opensource #kubernetes #containers #Istio #Automation #Ansible sprou.tt/18VJPZKygtV
2
11
3
6
Check out the new Red Hat Product Security Centre access.redhat.com/security
1
This looks very neat, want to try it.
Stefan Schimanski (@the_sttts) profile pictureStefan Schimanski@the_sttts22 May 2019
The @kinvolkio magicians have built a kubectl controlled strace for pods with a time machine feature: github.com/kinvolk/inspektor… Looks super useful.
Load more