e34.fm

メインセッションでは @rung さんをゲストに迎えて Container security について，ニュースセッションでは GitHub Copilot，USENIX ATC '21, Idempotency-Key HTTP header，Go memory models などについて話しました．

Shownotes

The followings are links which we talked in this episode.

📰 News

• USENIX ATC '21 Technical Sessions
• https://twitter.com/copyconstruct/status/1409704676019216384
• Fighting the Fog of War: Automated Incident Detection for Cloud Systems
• GitHub Copilot · Your AI pair programmer
• Older Why GPT-3 Matters
• Manuel Araoz on how OpenAI's GPT-3 may be the biggest thing since bitcoin
• How Biased is GPT-3?. Despite its impressive performance, the… | by Catherine Yeo | Fair Bytes
• About GitHub Copilot telemetry
• Research recitation
• Abandoning GitHub
• CoRecursive Podcast - The Stories Behind The Code
• The Untold Story of SQLite With Richard Hipp
• The Birth of UNIX With Brian Kernighan
• draft-ietf-httpapi-idempotency-key-header-00
• QUIC is now RFC 9000
• research!rsc: Memory Models
• Go's Memory Model
• https://twitter.com/_rsc/status/1410007601996312577
• doc: define how sync/atomic interacts with memory model #5045
• research!rsc: Hardware Memory Models (Memory Models, Part 1)
• research!rsc: Programming Language Memory Models (Memory Models, Part 2)
• How Netflix uses eBPF flow logs at scale for network insight
• How To Add eBPF Observability To Your Product
• 2: eBPF with yuuki
• A Day in the Life of a Cloud Network Engineer at Netflix - NET303

🚀 Main

• 自宅で美味しい紅茶を飲む｜rung | Hiroki Suezawa｜note
• https://www.suezawa.net/
• Dockerの諸問題とRocket登場の経緯
• Container Security: Isolation Heaven or Dependency Hell
• Docker Image Insecurity
• nsenter: clone /proc/self/exe to avoid exposing host binary to container
• Kubernetes Security for Microservices
• Distroless
• Threat Alert: An Attack Against a Docker API Leads To Hidden Cryptominers
• MITRE ATT&CK®
• Threat Modeling Uncover Security Design Flaws Using The STRIDE Approach
• Containers Matrix | MITRE ATT&CK®
• Threat matrix for Kubernetes
• MITRE ATT&CK framework for container runtime security with Falco
• gVisor Security Basics - Part 1
• Firecracker – Lightweight Virtualization for Serverless Computing
• コンピュータの構成と設計』
• Hacking：美しき策謀
• Practical Malware Analysis
• 体系的に学ぶ 安全なWebアプリケーションの作り方
• プロフェッショナルSSL/TLS
• セキュリティはなぜ破られたのか
• Threat Modeling: Design For Security
• CISSP Study Guide
• Building Secure and Reliable Systems
• Container Security
• Kubernetes Third Party Security Audit(2019) findings
• Beyond Corp
• Certified Kubernetes Security Specialist (CKS)
• kCTF | kCTF is a Kubernetes-based infrastructure for CTF competitions
• Open Policy Agent Rego Knowledge Sharing Meetup