2022-06-02: python:3.10.4-bullseye Released

Python publishes python:3.10.4-bullseye container image that includes a fix for CVE-2022-1292.

In my last post, I started explaining how to configure the IoT Edge device hierarchy’s IT Proxy. This post will go one layer down and set up the Layer 5 device from the Purdue model for manufacturing networks. Reconfiguring The Network While implementing network segregation in the cloud is relatively easy, implementing it with a […]

April 15, 2021May 10, 2021toddysm

Embed the Origin Dockerfiles into Your Docker Container Images Using Labels

With the recent Solorigate incident, a lot of emphasis is put on determining the origin of the software running in an enterprise. For Docker container images, this will mean to embed in the image the Dockerfile the image was built from. However, tracking down the software origin is not so trivial to do. For closed-source […]

February 24, 2021February 24, 2021toddysm

Implementing Containers’ Secure Supply Chain with Sigstore Part 3 – Ephemeral Keys and Artifact Promotion

In the last post of the series about Sigstore, I will look at the most exciting part of the implementation – ephemeral keys, or what the Sigstore team calls keyless signing. The post will go over the second and third scenarios I outlined in Implementing Containers’ Secure Supply Chain with Sigstore Part 1 – Signing […]

November 17, 2022November 17, 2022toddysm

Signatures, Key Management, and Trust in Software Supply Chains – Part 2: Exploiting Signatures

In Part 1 of the series Signatures, Key Management, and Trust in Software Supply Chains, I wrote about the basic concepts of identities, signatures, and attestation. In this one, I will expand on the house buying scenario, that I hinted about in Part 1, and will describe a few ways to exploit it in the […]

February 8, 2022February 13, 2022toddysm

Learn More About Your Home Network with Elastic SIEM – Part 2: Collect Firewall Logs

In my previous post, Learn More About Your Home Network with Elastic SIEM – Part 1: Setting Up Elastic SIEM, I explained how you could set up Elastic SIEM on a Raspberry Pi[ad]. The next thing you would want to do is to collect the logs from your firewall and analyze them. Before I jump […]

August 26, 2020February 23, 2021toddysm

2022-05-27: debian:bullseye-20220527 Released