Hi
user
Admin Login:
Username:
Password:
Name:
deploying kubernetes safer(ish) [keynote]
--client
purpleconnz
--show
purplecon_2019
--room plenary_3 15035 --force
Prev: 11 choose your own adventure: password reset [keynote]
Next: 0 a novice red teamer's guide to self help [keynote]
show more...
Author(s):
james
Location
Plenary Room
Date
oct Wed 16
Days Raw Files
Start
12:05
First Raw Start
11:53
Duration
00:15:00
Offset
0:11:27
End
12:20
Last Raw End
12:53
Chapters
00:00
0:05:42
Total cuts_time
9 min.
raw-playlist
raw-mp4-playlist
encoded-files-playlist
host
tweet
mp4
svg
png
assets
release.pdf
deploying_kubernetes_saferish_keynote.json
logs
Admin:
episode
episode list
cut list
raw files day
marks day
marks day
image_files
State:
---------
borked
edit
encode
push to queue
post
richard
review 1
email
review 2
make public
tweet
to-miror
conf
done
Locked:
clear this to unlock
Locked by:
user/process that locked.
Start:
initially scheduled time from master, adjusted to match reality
Duration:
length in hh:mm:ss
Name:
Video Title (shows in video search results)
Emails:
email(s) of the presenter(s)
Released:
Unknown
Yes
No
has someone authorised pubication
Normalise:
Channelcopy:
m=mono, 01=copy left to right, 10=right to left, 00=ignore.
Thumbnail:
filename.png
Description:
Sometimes evil conglomerates, large companies and/or totally regular and normal individuals prefer to run Kubernetes themselves, instead of using a public cloud provider - perhaps they don't trust the InterGoogles, perhaps they want to experience the incessant joys of maintenance and upgrades themselves, or perhaps (THE REAL REASON) they wanted to justify their sweet, sweet devops stickers on their laptop. Sure, not trusting someone else's computer make sense in some threat models, the (sometimes overly-enthusiastic) DIY approach does mean they open themselves up to a whole host of other problems - Google probably does know how to deploy, manage and secure Kubernetes better than anyone else, since they kinda built it. They've probably even got better stickers. Unfortunately, setting it up is HARD. There's so many moving parts and the vaguely dodgy how-to posts on random blogs always seem to be a few versions behind - AND they feel like they get away with it by saying “Definitely probably don't do this in production, but it's totally fine to do for testing, what's the worst that could happen?*"" This talk will take you through some of the parts of the kubernetes setup that are commonly ignored (“oh yeah we’ll definitely $100% get to that later”), or excluded from scripts you piped from curl to bash, or are pretty easy to accidentally get wrong if you didn’t know about this other thing that wasn’t made immediately obvious. If you’re an auditor, these are your super tasty critical severity fairy-bread tickets. If you’re a defender, these are the things that differentiate your totally awesome cluster of orchestrated hotness from a totally awesome cluster of orchestrated hot mess. If you’re an attacker who’s popped a shell and found themselves trapped in a container <strike>of emotions</strike>, these are the things that make you have a big sad when they’re done right.
markdown
Comment:
production notes
2019-10-16/11_53_33.ts
Apply:
11:53:33 - 12:02:49 ( 00:09:16 )
S:
11:53:33 -
E:
12:10:04
D:
00:16:31
(
End:
556.0)
show more...
vlc ~/Videos/veyepar/purpleconnz/purplecon_2019/dv/plenary_3/2019-10-16/11_53_33.ts :start-time=00.0 --audio-desync=0
Raw File
Cut List
11:53:33
seconds: 0.0
Wall: 11:53:33
Duration
00:16:31
12:10:04
seconds: 556.0
Wall: 12:02:49
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
2019-10-16/11_53_33.ts
Apply:
12:02:49 - 12:04:22 ( 00:01:33 )
S:
11:53:33 -
E:
12:10:04
D:
00:16:31
(
Start:
556.0) (
End:
649.0)
show more...
vlc ~/Videos/veyepar/purpleconnz/purplecon_2019/dv/plenary_3/2019-10-16/11_53_33.ts :start-time=0556.0 --audio-desync=0
Raw File
Cut List
11:53:33
seconds: 556.0
Wall: 12:02:49
Duration
00:16:31
12:10:04
seconds: 649.0
Wall: 12:04:22
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
2019-10-16/11_53_33.ts
Apply:
12:04:22 - 12:10:04 ( 00:05:42 )
S:
11:53:33 -
E:
12:10:04
D:
00:16:31
(
Start:
649.0)
show more...
vlc ~/Videos/veyepar/purpleconnz/purplecon_2019/dv/plenary_3/2019-10-16/11_53_33.ts :start-time=0649.0 --audio-desync=0
Raw File
Cut List
11:53:33
seconds: 649.0
Wall: 12:04:22
Duration
00:16:31
12:10:04
seconds: 0.0
Wall: 11:53:33
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
2019-10-16/12_23_33.ts
Apply:
12:23:33 - 12:27:28 ( 00:03:55 )
S:
12:23:33 -
E:
12:53:32
D:
00:29:59
(
End:
235)
show more...
vlc ~/Videos/veyepar/purpleconnz/purplecon_2019/dv/plenary_3/2019-10-16/12_23_33.ts :start-time=00.0 --audio-desync=0
Raw File
Cut List
12:23:33
seconds: 0.0
Wall: 12:23:33
Duration
00:29:59
12:53:32
seconds: 235.0
Wall: 12:27:28
Comments:
mp4
mp4.m3u
dv.m3u
Split:
Sequence:
:
delete
Rf filename:
root is .../show/dv/location/, example: 2013-03-13/13:13:30.dv
Sequence:
get this:
check and save to add this
2019-10-16/11_53_33.ts
2019-10-16/12_23_33.ts
Veyepar
Video Eyeball Processor and Review
