2022-03-08: python:3.10.2-bullseye Released

Python publishes puthon:3.10.2-bullseye container image. This is the last Python image before the CVE-2022-0778 OpenSSL vulnerability was fixed.

To provide support for the hierarchical Azure IoT Edge scenarios we started working on a connected registry implementation that will allow extension of the Azure container registry functionality to on-premises. For those of you who are not familiar with what a hierarchical IoT Edge scenario is, take a look at the Purdue network model used […]

March 31, 2021March 31, 2021toddysm

Addressing the Current Challenges of Patching Container Vulnerabilities

While working on a process of improving the container secure supply chain, I often need to go over the current challenges of patching container vulnerabilities. With the introduction of Automatic VM Patching, having those conversations are even more challenging because there is always the question: “Why can’t we patch containers the same way we patch […]

August 23, 2022August 22, 2022toddysm

Embed the Origin Dockerfiles into Your Docker Container Images Using Labels

With the recent Solorigate incident, a lot of emphasis is put on determining the origin of the software running in an enterprise. For Docker container images, this will mean to embed in the image the Dockerfile the image was built from. However, tracking down the software origin is not so trivial to do. For closed-source […]

February 24, 2021February 24, 2021toddysm

Learn More About Your Home Network with Elastic SIEM – Part 2: Collect Firewall Logs

In my previous post, Learn More About Your Home Network with Elastic SIEM – Part 1: Setting Up Elastic SIEM, I explained how you could set up Elastic SIEM on a Raspberry Pi[ad]. The next thing you would want to do is to collect the logs from your firewall and analyze them. Before I jump […]

August 26, 2020February 23, 2021toddysm

To 404 or Not to 404 – Using HTTP Response Codes to Provide User-Friendly Error Messages in Microservices Implementation

How often the following happens to you? You write your client code, you call an API, and receive a 404 Not found response. You start investigating the issue in your code; change a line here or there; spend hours troubleshooting just to find out that the issue is on the server-side, and you can’t do […]

September 7, 2021January 9, 2022toddysm

2022-03-08: python:3.10.2-bullseye Released

2022-03-15: OpenSSL CVE-2022-0778 Fixed

2022-03-16: debian:bullseye-20220316 Released