$ find ./research -type f
Research Archive
All essays, agent notes, vulnerability writeups, and containerd stories in one filterable index.
Content
9 entries
- Containerd RootfsImageName Cache Poisoning Through Checkpoint Restore Running a crafted checkpoint image as a pod plants a tag in a node's containerd store, so the next IfNotPresent pod even in another namespace, silently runs an attacker's image.
- Thinking Outside the Containerd The system behind my vuln research leading to 4 CVEs with 1 being a novel critical that even Anthropic/Google/Microsoft missed.
- Reading Host Secrets Through Containerd Checkpoint Logs containerd's checkpoint restore follows a symlink planted in container.log, copying any node-local file the root daemon can open — including a co-resident pod's live ServiceAccount token straight into kubectl logs.
- Containerd CDI Annotation Smuggling Grafts Host Devices Into Pods Restoring an attacker-authored containerd checkpoint smuggles a host device on a GPU node, mounts, env, and OCI hooks into a pod that requested nothing.
- Root on the Node From a Containerd Image Label Two labels baked into a container image turn containerd's restart monitor into root command execution on the node. Run the image as an ordinary pod with no privileged container, hostPath, or checkpoint.
- Red-Teaming GitHub Actions with Claude Skills A Claude skill that audits GitHub Actions workflows for reachability instead of patterns, and the two-stage pipeline that runs it across tens of thousands of repos.
- A Fork PR With Google Cloud Credentials Attached A pull_request_target workflow ran fork PR code with live GCP credentials, so anyone who opened a pull request executed code as the project's CI service account before review.
- DockTalk: Two AIs Gossiping Across the Namespace Wall Two isolated Docker containers with no peer network can still pass chat frames through POSIX byte-range locks on /proc/self/ns/time. DockTalk wires that carrier to two live LLM agents.
- AI's Hidden Economic Trap The AI argument worth having isn't the superintelligence that might arrive someday. It's the ordinary economics already here.
// no posts match those filters.