Searching for a hardware/IoT product to perform security assessment ⌚️🛰🎮🎰🦼🛵⛽️🛸
You will get a free security assessment in return 🆓️
For more details: linkedin.com/posts/hamsen_fi…
@WebSecAcademy you have a vulnerability in your labs 😜
But for real, there is an XSS in many of the labs at `GET /post/comment/confirmation?postId=">😈`. Don't consider it an issue for purposely vulnerable labs (hence the irresponsible disclosure), but it allows for cheating 🤷♂️
Examples for accidentally vulnerable labs are:
portswigger.net/web-security…
portswigger.net/web-security…
Super excited to be on TGIK by @VMwareTanzu and see @PuDiJoglekar play around with Connaisseur 👨💻
Hope many of you join and share their thoughts and ideas on Connaisseur and container signing in general!
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
xoph retweeted
#Solarenergie ist inzwischen sehr günstig. Was es jetzt braucht, um beim Solarausbau in Deutschland durchzustarten, weiß Handwerksmeister Stefan Kutscher.
👇👇👇
#fuerunsalle
Connaisseur v2.2 is out 🚀
It contains improvements to usability and compatibility. For more details checkout the article 👇 (demo and gif included 😜)
medium.com/sse-blog/connaiss…
xoph retweeted
🐳 Verify Container Signatures in #Kubernetes using Notary or Cosign
Connaisseur: an admission controller to integrate container image signature verification and trust pinning into a k8s cluster
v2 adds support for multiple keys and signature solutions
medium.com/sse-blog/verify-c…
xoph retweeted
Verifying Container image signatures in Kubernetes using Notary or Cosign or both
More medium.com/sse-blog/verify-c…
xoph retweeted
🎉🎉🎉 Aaaand we're here! @projectsigstore cosign is officially 1.0! 🎉🎉🎉
blog.sigstore.dev/cosign-1-0…
github.com/sigstore/cosign/r…
🚨 @projectsigstore cosign 1.0 is one week away! 🚨
Try it out today on any @OCI_ORG
compatible registry.
This includes support for:
- @Yubico PIV devices
- cloud KMS (@googlecloud, @Azure and @AWS)
- @SPDXTeam/@CycloneDX_Spec SBOMs
- #wasm, and more!
github.com/sigstore/cosign
Excellent episode of @KubernetesPod on "Software Supply Chain Security" with @priyawadhwa16: kubernetespodcast.com/episod…
Amazing how the whole space is moving so fast. Excited to see how all of this will eventually tie together to secure the supply chain
Getting started to verify container signatures in #Kubernetes has never been so fast 🚀
Connaisseur 2.0 is out now 🎉 checkout our all new documentation: sse-secure-systems.github.io…
xoph retweeted
Connaisseur 2.0 is released 🎉
Now you can verify container images in Kubernetes using @Docker's Content Trust or Cosign by @projectsigstore or both...
💾 Source Code: github.com/sse-secure-system…
📃Documentation: sse-secure-systems.github.io…
✍️Release Article: medium.com/sse-blog/verify-c…
xoph retweeted
Nextcloud VM now supports automatic setup of secure DNS via @desec_io. Check out the @Nextclouders interview to learn more about why they have chosen deSEC as their preferred solution. 👇
📢 Recently the popular VM developed by Hansson IT introduced automatic, secure setup of DNS using desec.io.
We interviewed both the desec.io founder and Daniel Hansson for more details!
nextcloud.com/blog/interview…
xoph retweeted
OCI image signing in Kubernetes / Connaisseur using sigstore/cosign
blog.sigstore.dev/verify-oci…
xoph retweeted
With the latest release of Connaisseur, we are adding experimental support for Cosign from @projectsigstore 🥳
This will let you verify container image signatures from an OCI registry in #Kubernetes in no time!
blog.sigstore.dev/verify-oci…
xoph retweeted
Guest post today from @projectsigstore contributor @xophham!
A guide on how to verify cosign signatures in Kubernetes before deployment using github.com/sse-secure-system….
blog.sigstore.dev/verify-oci…
Here's a sneak peak at how to get from zero to verifying image signatures in #Kubernetes using Connaisseur and Cosign from @projectsigstore 🤘
xoph retweeted
It's about time for @Google to make the switch and secure their DNS. DNS security must be simple and accessible -- like desec.io. #DNSSEC #deSEC #SaferInternetDay
zdnet.com/article/hacktivist…
Das Leben ist eine Lotterie bei der man schon gewonnen oder verloren hat, wenn man geboren wird. Müssten wir uns erst entscheiden, wie die Vermögensverteilung sein sollte und dann würde gelost, wäre die Welt sicher eine andere.
#altruismus
Wenn man das akzeptiert, hat man kein ureigenes Recht mehr am Besitz. Umverteilung ist quasi nur gerecht. Ansetzen sollte die an Erbeschaften und Vermögen, welche die Schere zwischen arm und reich zementieren, erstere sogar über Generationen hinweg.
Man kann mit einer selbstauferlegten Vermögenssteuer (5%p.a.) ausprobieren, wie es sich anfühlt den geschenkten Vorteil auszugleichen. Wie setzt man das Geld am effektivsten ein? Finde @effektivspenden gibt die konsequente Antwort darauf: effektiv-spenden.org/
Danke 🙏