BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Call Me Phishmael: Hunting Sensitive Docker Images i
 n Google\n   Container Registry Leaks\n   When: Sunday\, Aug 13\, 10:00 - 
 10:40 PDT\n   Where: Flamingo - Mesquite - Cloud Village - [1]Map\n\n   Sp
 eakerBio:Ian Dillon \, Staff Security Engineer at New York Times\n   Ian D
 illon is a Staff Security engineer at the New York Times\, mostly\n   focu
 sing on cloud security. Long interested in security (like driving\n   24 h
 ours straight for DEF CON 8)\, he instead wandered in the desert\n   for y
 ears as a software engineer\, DBA\, then cloud engineer before\n   coming 
 to his senses.\n   Twitter: [2]@amenbreakpoint\n\n   Description:\n   UI c
 onfusion\, ACL limitations\, and default product behaviors in Google\n   C
 loud Platform (GCP) have created a scenario in which it is very easy\n   t
 o accidentally expose sensitive Google Container Registry (GCR)\n   Docker
  images to the public. To try and determine the frequency of\n   this misc
 onfiguration\, and the resulting value of leaked Docker images\n   to atta
 ckers\, we built a scanner to help find GCP projects with\n   mis-configur
 ed GCR repositories. The results were surprising: scores\n   of open image
  repositories with sensitive source code and a multitude\n   of active sec
 rets to cloud environments\, build systems\, and external\n   vendors.\n\n
    In this presentation\, I'll explain the common cause of the GCR\n   mis
 configuration and how other GCP service defaults can widen the\n   exposur
 e. We'll also discuss our scanner's approach in narrowing down\n   potenti
 al target projects and avoiding GCP abuse mitigation. Finally\,\n   we'll 
 go over the common mistakes I found in image builds and\n   applications t
 hat allowed simple image exposure to cascade into\n   privilege escalation
  and direct production system access.\n\n   '\n\n   1. #FlamingoThirdFloor
 \n   2. https://twitter.com/amenbreakpoint\n\n\n
DTEND:20230813T174000Z
DTSTART:20230813T170000Z
LOCATION:CLV - Flamingo - Mesquite - Cloud Village
SUMMARY:Call Me Phishmael: Hunting Sensitive Docker Images in Google Contai
 ner Registry Leaks
END:VEVENT
END:VCALENDAR