2022-05-09: debian:bullseye-20220509 Released

Debian publishes debian:bullseye-20220316 container image that DOES NOT include a fix for CVE-2022-1292.

In the last post of the series about Sigstore, I will look at the most exciting part of the implementation – ephemeral keys, or what the Sigstore team calls keyless signing. The post will go over the second and third scenarios I outlined in Implementing Containers’ Secure Supply Chain with Sigstore Part 1 – Signing […]

November 17, 2022November 17, 2022toddysm

To 404 or Not to 404 – Using HTTP Response Codes to Provide User-Friendly Error Messages in Microservices Implementation

How often the following happens to you? You write your client code, you call an API, and receive a 404 Not found response. You start investigating the issue in your code; change a line here or there; spend hours troubleshooting just to find out that the issue is on the server-side, and you can’t do […]

September 7, 2021January 9, 2022toddysm

Requirements for Image Annotations

In my previous post What to Desire from a Good Image Annotator?, I wrote about the high-level capabilities of an Image Annotation Tool. In this one, I will go over the requirements for the actual image annotations or as you may also know it, tagging. I will use two images as examples. The first one […]

May 21, 2019February 21, 2021toddysm

Implementing Containers’ Secure Supply Chain with Sigstore Part 2 – The Magic Behind

In my previous post, Implementing Containers’ Secure Supply Chain with Sigstore Part 1 – Signing with Existing Keys, I went over the Cosign experience of signing images with existing keys. As I concluded there, the signing was easy to achieve, with just a few hiccups here and there. It does seem that Cosign does a […]

November 2, 2022November 2, 2022toddysm

Learn More About Your Home Network with Elastic SIEM – Part 2: Collect Firewall Logs

In my previous post, Learn More About Your Home Network with Elastic SIEM – Part 1: Setting Up Elastic SIEM, I explained how you could set up Elastic SIEM on a Raspberry Pi[ad]. The next thing you would want to do is to collect the logs from your firewall and analyze them. Before I jump […]

August 26, 2020February 23, 2021toddysm

Using OCI Annotation to Track Container Image Lifecycle

For a while, we’ve been exploring the idea of using OCI annotations to track the lifecycle of container images. The problem we are trying to solve is as follows. Container images are immutable and cannot be dynamically patched like virtual machines. To apply the latest updates to a containerized application, teams must produce a new […]

July 18, 2023July 18, 2023toddysm

2022-05-09: debian:bullseye-20220509 Released

2022-05-03: OpenSSL CVE-2022-1292 Fixed

2022-05-27: debian:bullseye-20220527 Released