2022-03-18: python:3.10.3-bullseye Released

Python publishes python:3.10.3-bullseye container image that includes a fix for CVE-2022-0778.

This morning I was looking at our company’s e-mail gateway and cleaning some of the quarantined messages when I got reminded that while my company’s digital infrastructure may be well protected with firewalls and e-mail gateways, my home network can be wide open and vulnerable to attacks. Like everyone else, I try not to spend […]

February 18, 2019February 21, 2021toddysm

OCI Artifact Manifests, OCI Referrers API and Their Support Across Registries (Part 1)

[UPDATE: 2023-03-26] When I wrote this post, the expectation was that OCI will release version 1.1 of the specification with artifact manifest included. This release was supposed to happen by end of Jan 2023 or mid Feb 2023. Unfortunately, the OCI 1.1 Image Spec PR 999 put a hold on that and as of today, […]

January 5, 2023March 26, 2023toddysm

Implementing Cybersecurity Research Sandbox Environment in the Cloud

For a while, I’ve been planning to build a cybersecurity research environment in the cloud that I can use to experiment with and research malicious cyber activities. Well, yesterday I received the following message on my cell phone: Hello mate, your FEDEX package with tracking code GB-6412-GH83 is waiting for you to set delivery preferences: […]

January 23, 2020February 23, 2021toddysm

Embed the Origin Dockerfiles into Your Docker Container Images Using Labels

With the recent Solorigate incident, a lot of emphasis is put on determining the origin of the software running in an enterprise. For Docker container images, this will mean to embed in the image the Dockerfile the image was built from. However, tracking down the software origin is not so trivial to do. For closed-source […]

February 24, 2021February 24, 2021toddysm

What to Desire From a Good Image Annotator?

Recently, I started looking for an image annotation tool that we can use to annotate a few thousand images. There are quite a few that you can choose from. Starting with paid ones like Labelbox and Dataturks, to free and open source ones like coco-annotator, imglab and labelimg. The paid ones have also a free […]

January 3, 2019February 21, 2021toddysm

Configuring a hierarchy of IoT Edge Devices at Home Part 1 – Configuring the IT Proxy

To provide support for the hierarchical Azure IoT Edge scenarios we started working on a connected registry implementation that will allow extension of the Azure container registry functionality to on-premises. For those of you who are not familiar with what a hierarchical IoT Edge scenario is, take a look at the Purdue network model used […]

March 31, 2021March 31, 2021toddysm

2022-03-18: python:3.10.3-bullseye Released

2022-03-16: debian:bullseye-20220316 Released

2022-05-03: OpenSSL CVE-2022-1292 Fixed