Lenny Zeltser
zeltser.com · Personal blog · on HN since 2010
Lenny Zeltser is a security practitioner who writes about malware analysis, incident response, honeypots and Docker security.
What HN saysCommenters cite his posts on Docker security risks, DNS tunneling and padlock confusion in browsers, though one disputes the Docker isolation claims.
20HN people shared it
5linked it in comments
15stories submitted
241story points
3 months agolast shared
2010people per year2026
Most-shared posts
- 1Security risks and benefits of docker application3 people · first shared 2015
- 2Tunneling Data and Commands Over DNS to Bypass Firewalls2 people · 70 points · first shared 2015 · 34 comments on HN
- 3REMnux: A Linux Distribution for Reverse-Engineering Malware2 people · 18 points · first shared 2010 · 1 comments on HN
- 4Cybersecurity Checklist for Political Campaigns1 people · 100 points · first shared 2019 · 31 comments on HN
- 5Tips for Troubleshooting Human Communications1 people · 25 points · first shared 2017 · discussion on HN
- 6Conversation with a Tech Support Scammer1 people · 7 points · first shared 2015 · discussion on HN
- 7Experimenting with Honeypots Using the Modern Honey Network1 people · 5 points · first shared 2015 · discussion on HN
- 8How to Get and Set Up a Free Windows VM for Malware Analysis1 people · 3 points · first shared 2019 · discussion on HN
- 9The Illusion of Invulnerability in Cybersecurity1 people · 3 points · first shared 2026 · discussion on HN
- 10How You Can Set Up Honeytokens Using Canarytokens to Detect Intrusions1 people · 3 points · first shared 2016 · discussion on HN
- 11A Field Guide to the AI Security Market1 people · 2 points · first shared 2026 · discussion on HN
- 12Run Metasploit Framework as a Docker Container1 people · 2 points · first shared 2016 · discussion on HN
- 13How to Suck at Information Security by Lenny Zeltser1 people · 1 points · first shared 2011 · discussion on HN
- 14Version 7 of the REMnux Distro Is Now Available1 people · 1 points · first shared 2020 · discussion on HN
- 15Third-party-keyboards-security1 people · 1 points · first shared 2017 · discussion on HN
What HN people wrote when they linked it
ignoramous · 2020-04-23
> ...with the advertisers’ favicon, to increase transparency.
My mom thinks any URL with a padlock next to it is über secure [0][1] and that she can give her bank details without worry.
[0] https://zeltser.com/padlock-and-favicon-confusion-in-browsers/
[1] https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the…
dkopi · 2016-05-15
Any type of traffic can be used to tunnel other types of traffic.
You can tunnel over DNS as well:
https://zeltser.com/c2-dns-tunneling/
jacquesm · 2015-08-07
I'm not sure if docker is the right solution here, a VM would seem to be much better at this kind of isolation.
https://zeltser.com/security-risks-and-benefits-of-docker-application/
Fritsdehacker · 2015-07-23
It would actually be less secure to run your browser in a Docker container. If an attacker can break out of the container, it has root access to your system.
https://zeltser.com/security-risks-and-benefits-of-docker-application/
code_research · 2016-03-10
For your convenience here are the URLs from that broken document:
http://blog.bofh.it/debian/id_413
http://reventlov.com/advisories/using-the-docker-command-to-root-the-h…
http://events.linuxfoundation.org/sites/events/files/slides/Containers…
http://opensource.com/business/14/9/security-for-docker
https://zeltser.com/security-risks-and-benefits-of-docker-application/
https://benchmarks.cisecurity.org/tools2/docker/CIS_Docker_1.6_Benchma…
https://forums.grsecurity.net/viewtopic.php?f=7&t=2522
http://xebia.github.io/cd-with-docker/#/
http://www.schibsted.pl/2015/06/how-we-used-docker-to-deploy-schibsted…
http://itrevolution.com/the-three-ways-principles-underpinning-devops/
Most of these will be already in your bookmarks, when you are following docker development.
Why was this talk is interesting? Is there a video that shows things that happened that are not reflected in the powerpoint pdf? What was new?
BTW the powerpoint document wins the "most annoying document of the week"- award. We have better ways to publish URLs in 2016 than powerpoint. Please use reveal or anything else next time, thanks!