In this discussion with Nathan McCauley of Docker, we talk about the different ways that users have come to think about Docker security over the years. McCauley explained that many early security concerns stemmed from users not being familiar with the technology at play. Docker has addressed these concerns in the base platform over the years, aided by a movement in the DevOps community towards embracing container technology and how it can help them achieve their security goals. The discussion also covers Docker 1.12’s native Swarm orchestration mode, and some additional security features like cryptographic node identity.

Learn more at: https://thenewstack.io/foundation-of-secure-containers/

Watch on YouTube: https://www.youtube.com/watch?v=j5XJ1Vsu1O0

#114: Building the Foundation of Secure Containers

Alex Williams, founder of The New Stack, hosts "The New Stack Analysts," a biweekly round-table discussion covering The New Stack's latest data research, and topics related to app development and back-end services.

Listen to our other TNS Podcasts on SoundCloud:

The New Stack Makers: https://soundcloud.com/thenewstackmakers 

The New Stack Context: https://soundcloud.com/thenewstackcontext

The New Stack @ Scale: https://soundcloud.com/thenewstackatscale

Technology

Tech News

Podcasting

Gadgets

Software How-To

Wondering what we’ve been up to lately? Well, we’ve been upping our game and making moves, literally. The New Stack podcasts have been polished, upgraded and will be at thenewstack.simplecast.com

Subscribe to The New Stack Makers on Simplecast and share your favorite segments with 30, 60, or 90 second Recast audiograms.

We've Moved to Simplecast!

In this edition of The New Stack Analysts podcast, host Alex Williams, founder and publisher of The New Stack and co-host Cheryl Hung, vice president of ecosystem at CNCF Cloud Native Computing Foundation (CNCF), discuss why secrets management is essential for DevOps teams, what the tool landscape is like and why Vault was selected as the top alternative. CNCF Tech Radar contributors and featured guests were Steve Nolen, site reliability engineer, RStudio — which creates open source software for data science, scientific research and technical communication — and Andrea Galbusera, engineering and co-founder, AuthKeys, a SaaS platform provider for managing and auditing servers authorizations and logins.

HashiCorp Vault Gets Top Honors in Latest CNCF Tech Radar

In this episode of The New Stack Analysts podcast, TNS founder and publisher Alex Williams virtually shared pancakes and syrup with guests to discuss how Apache Cassandra, gRPC and, other tools and platforms play a role in managing data on Kubernetes.

Mya Pitzeruse, software engineer and OSS contributor from effx; Sam Ramji, chief strategy officer at Datastax; and Tom Offermann, a lead software engineer at New Relic were the guests. They offered deep perspectives about the evolution of data management on Kubernetes and the work that remains to be done.

What is Data Management in the Kubernetes Age?

On the last The New Stack Analysts of the year, the gang got together — remotely, obviously — to reflect on this year. And oh what a year! But for a year in tech, 2020 still had a lot of hits — and some misses.

Publisher Alex Williams was joined by Libby Clark, Joab Jackson, Bruce Gain, Steven Vaughan-Nichols, and Jennifer Riggins. We looked back on the year that saw millions die, no one fly, and a lot of jobs in turmoil. It was also a year that, while many things screeched to a halt, much of the tech industry had to keep going more than ever.

Is Hindsight Still 2020? Reviewing the Year in Tech

Prisma Cloud from Palo Alto Networks sponsored this podcast.

Identity and access management (IAM) was previously relatively straightforward. Often delegated as a low-level management task to the local area network (LAN) or wide area network (WAN) admin, the process of setting permissions for tiered data access was definitely not one of the more challenging security-related duties. However, in today’s highly distributed and relatively complex computing environments, network and associated IAM are exponentially more complex. As application creation and deployment become more distributed, often among multicloud containerized environments, the resulting dependencies, as well as vulnerabilities, continue to proliferate as well, thus widening the scope of potential attack surfaces.

How to manage IAM in this context was the main topic of this episode of The New Stack Analysts podcast, as KubeCon + CloudNativeCon attendees joined TNS Founder and Publisher Alex Williams and guests live for the latest “Virtual Pancake & Podcast.” They discussed why IAM has become even more difficult to manage than in the past and offered their perspectives about potential solutions. They also showed how enjoying pancakes — or other variations of breakfast — can make IAM challenges more manageable.

The event featured Lin Sun, senior technical staff member and Master Inventor, Istio/IBM; Joab Jackson, managing editor, The New Stack and Nathaniel “Q” Quist, senior threat researcher (Public Cloud Security – Unit 42), Palo Alto Networks. Jackson noted how the evolution of IAM has not been conducive to handling the needs of present-day distributed computing. Previously, it was “not exactly a security thing” nor a “developer problem,” and wasn’t even “a security problem, he said.

“[IAM] really almost was a network problem: if a certain individual or a certain process wants to access another process or a resource online, then you have to have the permissions in place to meet all the policy requirements about who can ask for these particular resources,” Jackson said. “And this is an entirely new problem with distributed computing on a massive and widespread scale…it’s almost a mindset, number one, about who can figure out what to do and then how to go about doing it.”

#114: Building the Foundation of Secure Containers

Download our free app to listen on your phone