99% of /proc/pid/stat parsing code is buggy. It splits by space, but 2nd field is exe name which may contain space: Bugs are everywhere: OpenJDK, qemu, BoehmGC, containers/sandboxes; same bug in C/C++/Java/Go/Py/JS/Rust, ~every hit: sourcegraph.com/search?q=conte… Fix: strrchr(')') first

I'm so happy to announce that I have joined Isovalent! The team is truly amazing and I can't wait to learn so much new stuff with them 🎊🐝

Experience the power of #community at the Kubernetes Community Days in Zurich! When a diverse group of experts come together to learn, #network, and share knowledge on all things #cloudnative. Learn more - get your ticket now: kcdzurich.ch

Docker priv esc via named pipes. cyberark.com/resources/thre…

My talk with John on Securing the Superpowers: Who loaded that eBPF program is now on Youtube. If you are interested in how we keep track and audit BPF program and map loading at Isovalent, check it out. youtu.be/UBVTJ0LeXxc

🐝Turn YAML into eBPF bytecode 🐝 Sound too good to be true? Check out the latest Tetragon docs from Mahé github.com/cilium/tetrago…

Falco completed a security audit, sponsored by CNCF & supported by Open Source Technology Improvement Fund. Quarkslab SAS found minor vulnerabilities & provided recommendations for analysis strategies. Read more about it here: falco.org/blog/falco-sec…

OH MY GOD 5 MINUTES DE PUR KIFF !!! MERCI Yvan Le Bolloc'h

I had fun discovering this Microsoft stuff and finding crashes! 🌪️

🥳 Woah! we got a new #Kubernetes Goat 🐐 scenario on Cilium Tetragon for eBPF-based runtime #security monitoring, detection & enforcement 🚀 🔥Try it out yourself at madhuakula.com/kubernetes-goa… 🌟 Give a start if you like github.com/madhuakula/kub… #CNCF #Hacking #Community

Nurturing Security Permaculture: Kubernetes SIG Security Update Tabitha Sable Mahé sraghunathan & Ala Solsvig Dewberry #KubeCon #CloudNativeCon next week sched.co/1HyV5

Just arrived for KubeCon!! 🚄🌷

Join SIG security for a maintainer track update in G001-G002 | Ground Floor | Congress center! 🪿

Thanks so much for coming to see Nurturing Security Permaculture at #KubeCon2023 with Ala Solsvig Dewberry sraghunathan Mahé The slides are up-to-date on Sched, if you want to check them out or click the links :-) kccnceu2023.sched.com/event/1HyV5/

Blog: Updates to the Auto-refreshing Official CVE Feed - kubernetes.io/blog/2023/04/2… #Kubernetes

Tetragon is the newest member of the Cilium hive, helping keep it secure🔒 Join Mahé for a Tetragon introduction and demo. Date: Wednesday, 19 July 2023 Time: 5:00pm CEST - 8:00am PT. Venue: Kubernetes SIG security tooling meeting 1/2

Avec un article sur Tetragon si vous parlez français 🇫🇷🥐! Cilium

Tetragon 1.0 has landed! 🎉 It features new default observability policies, extensive overhead benchmarks, and a ton of maturization, along with many additional features. Let's take a closer look 🧵 isovalent.com/blog/post/tetr…

Join us for the Tetragon First Community Call 🎉 📅Date: Monday 11th March ⏲️ Time: 5:00 PM UTC 🗒️ Meeting Notes and Link: isogo.to/tetragon-meeti… 🧵What to expect from the call? 👇 1/2

🐝Cilium Talks from KubeCon NA 2024🐝 Mahé, Joe Stringer, Kornilios Kourtis, and John Fastabend from Isovalent will hold a Contribfest session titled "Kickstart Your eBPF Journey With Tetragon" Join in! For more information 👇 sched.co/1hoyj