News for hackers. Stuff that matters.
Re:Cheap Kubernetes Cluster on AWS with Kubeadm by grogenaut on Wednesday February 27, 2019 @10:55AM (#19263974)
Depending on your data I'd also wonder about the security restrictions between tenants. It's a thing I consider on AWS as well depending on what I'm doing.
Re:Cheap Kubernetes Cluster on AWS with Kubeadm by dx034 on Wednesday February 27, 2019 @01:34PM (#19265694)
Do shared cores add any attack vectors other shared machines (with dedicated cores) don't have?
Re:Cheap Kubernetes Cluster on AWS with Kubeadm by whoisjohnkid on Thursday February 28, 2019 @12:02AM (#19269052)
If the vendor shares bare metal servers you’ll def want to keep this in mind: https://www.wired.com/story/dark-metal-cloud-computers-invis... - gist is they are some interesting attacks that can be ran on bare metal servers that are re-used
Re:Cheap Kubernetes Cluster on AWS with Kubeadm by grogenaut on Wednesday February 27, 2019 @01:44PM (#19265779)
There are always risks with shared harware, known and unknown veunerabilities in the hypervisor or hardware. All the recent intel stuff, row hammer, etc.

The interesting question comes when people start implementing hardware hypervisors and what is the risk profile there.

Security, at the end of the day, isn't about what is secure and what isn't. If you want to be secure, don't get on the internet. Everything else is a exercise in risk tradeoffs and mitigation.

If I was doing anything with PII, cc#'s or any other data I never want to touch I wouldn't use shared hardware without hard thought on it.

Re:Cheap Kubernetes Cluster on AWS with Kubeadm by londons_explore on Friday March 01, 2019 @08:09PM (#19286795)
Shared hardware from the big cloud players adds attack vectors, but it also comes with some of the best security minds trying to keep the entire platform secure.

For example, they'll typically be on secret mailing lists and aware of security vulnerabilities weeks before you know about them.