Group items tagged

Filter: All | Bookmarks | Topics Simple Middle

null--/graviton - 1 views

github.com/graviton

framework malware

shared by crazylion lee on 06 Oct 15 - No Cached

crazylion lee on 06 Oct 15

"A cross platform malware development framework "

<div class="cArrow"> </div><div class="cContentInner">"A cross platform malware development framework "</div>

...

Cancel

Little Snitch - 1 views

obdev.at/...index.html

mac Internet

shared by crazylion lee on 13 Nov 20 - No Cached

crazylion lee on 13 Nov 20

"As soon as you're connected to the Internet, applications can potentially send whatever they want to wherever they want. Most often they do this to your benefit. But sometimes, like in case of tracking software, trojans or other malware, they don't. But you don't notice anything, because all of this happens invisibly under the hood."

<div class="cArrow"> </div><div class="cContentInner">"As soon as you're connected to the Internet, applications can potentially send whatever they want to wherever they want. Most often they do this to your benefit. But sometimes, like in case of tracking software, trojans or other malware, they don't. But you don't notice anything, because all of this happens invisibly under the hood."</div>

...

Cancel

Hildegard: New TeamTNT Cryptojacking Malware Targeting Kubernetes - 0 views

unit42.paloaltonetworks.com/hildegard-malware-teamtnt

crack hack kubernetes

shared by 張旭 on 02 May 22 - No Cached

Top 5 Kubernetes Best Practices From Sandeep Dinesh (Google) - DZone Cloud - 0 views

dzone.com/...t-practices-from-sandeep-dines

docker

shared by chiehting on 06 Mar 19 - No Cached

Best Practices for Kubernetes
...

Cancel
#1: Building Containers
...

Cancel
Don’t Trust Arbitrary Base Images!
...

Cancel
...29 more annotations...
There’s a lot wrong with this: you could be using the wrong version of code that has exploits, has a bug in it, or worse it could have malware bundled in on purpose—you just don’t know.
...

Cancel
Keep Base Images Small
...

Cancel
Node.js for example, it includes an extra 600MB of libraries you don’t need.
...

Cancel
Use the Builder Pattern
...

Cancel
#2: Container Internals
...

Cancel
Use a Non-Root User Inside the Container
...

Cancel
Make the File System Read-Only
...

Cancel
One Process per Container
...

Cancel
Don’t Restart on Failure. Crash Cleanly Instead.
...

Cancel
Log Everything to stdout and stderr
...

Cancel
#3: Deployments
...

Cancel
Use the “Record” Option for Easier Rollbacks
...

Cancel
Use Plenty of Descriptive Labels
...

Cancel
Use Sidecars for Proxies, Watchers, Etc.
...

Cancel
Don’t Use Sidecars for Bootstrapping!
...

Cancel
Don’t Use :Latest or No Tag
...

Cancel
Readiness and Liveness Probes are Your Friend
...

Cancel
#4: Services
...

Cancel
Don’t Use type: LoadBalancer
...

Cancel
Type: Nodeport Can Be “Good Enough”
...

Cancel
Use Static IPs They Are Free!
...

Cancel
Map External Services to Internal Ones
...

Cancel
#5: Application Architecture
...

Cancel
Use Helm Charts
...

Cancel
All Downstream Dependencies Are Unreliable
...

Cancel
Use Weave Cloud
...

Cancel
Make Sure Your Microservices Aren’t Too Micro
...

Cancel
Use Namespaces to Split Up Your Cluster
...

Cancel
Role-Based Access Control
...

Cancel