56.3K
Downloads
115
Episodes
This is the show by and for DevSecOps practitioners who are trying to survive information overload, get through marketing nonsense, do the right technology bets, help their organizations to deliver value, and last but not the least to have some fun. Tune in for talks about technology, ways of working, and news from DevSecOps. This show is not sponsored by any technology vendor and trying to be as unbiased as possible. We talk like no one is listening! For good or bad :) For more info, show notes, and discussion of past and upcoming episodes visit devsecops.fm
Episodes
4 days ago
4 days ago
29 min
A merged security fix does nothing for a service still running the vulnerable build. A week of Node2Shell, PHP and GitLab vulnerabilities puts deployment speed, container contents and public exposure under scrutiny.
Andrey Devyatkin, Mattias Hemmingsson and returning co-host Julien Bisconti discuss patch delivery, minimal containers, private GitLab access, PHP maintenance and the certificate trust stores that browser updates do not reach.
What you will learn
- Why patching main and patching production are different milestones
- Why removing a shell does not eliminate interpreter-based attacks
- How mesh networks can restrict access to self-hosted GitLab
- When static HTML and CSS can replace a small PHP site
- Why browser certificate updates leave server trust stores to maintain
Full article and show notes: https://devsecops.fm/episodes/115/
No comments yet. Be the first to say something!