Thomas Dullien's guest appearances

Thomas Dullien

Screaming in the Cloud

Kubernetes Podcast from Google

Confident ROi with Alex Vorobieff

Owen Rogers

Melanie Cebula

Sarah Novotny

Martin Mao

Sam Ramji

Liz Rice

Scott Johnston

Bryan Liles

Aparna Sinha

Anna Belak

Miles Ward

Sandy Carter

Chris Porter

Josh Doody

Caroline Carter

OwlTail

Prodfiler is a new tool that provides fleet-wide full-system continuous profiling. It is in some ways the second act of its co-creator Thomas Dullien, who is an internationally-renowned reverse engineer and vulnerability researcher under the name Halvar Flake. Thomas joins us to discuss his career, what you should profile in a distributed system, and why you can’t sell something with a negative cost. Do you have something cool to share? Some questions? Let us know:  web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod  Chatter of the week  Container blocakges Container houses  News of the week  Crossplane moves to incubation in CNCF: CNCF coverage Crossplane coverage Episode 141, with Daniel Mangum   Backup for GKE Google Cloud Next session catalog is live  Register here   Kubernetes multi-cluster panel on October 6 GKE updates: publishing with Private Service Connect, CSI driver for Filestore GA, SSL policies &amp; HTTPS redirects for multi-cluster Ingress Azurescape: attack on Azure Container Instances by Unit 42 at Palo Alto Networks CVE-2021-25741 for subpath mount symlink attack (High) CVE-2020-8561 for webhook response logging (Medium) NCC Group weighs in on NSA guidance Snyk raises $530m  Episode 140, with Kamil Potrec   Sqlcommenter merges with OpenTelemetry Kubermatic 2.18 and KubeOne 1.3  Episode 109, with Sebastian Scheele   Tanzu Kubernetes Grid 1.4 5 years of Envoy OSS  Episode 33, with Matt Klein    Links from the interview  Thomas Dullien/Halvar Flake Mathematik, with a K Stages of life vs. maths ability required, by Pearls of Raw Nerdism Vicky the Viking TV show Assembly Language Masterclass GEOS copy protection by Michael Stiel Time travel debugging “German hacker denied entrance into US for Black Hat training” Zynamics acquired by Google  BinDiff BinNavi   Project Zero “For whom?”, asked R Morris Sr. optimyze.cloud’s original business model Introducing Prodfiler Profiling The Datacenter As A Computer: An Introduction to the Design of Warehouse-Scale Machines Google-Wide Profiling: A Continuous Profiling Infrastructure for Data Centers  Dapper, a Large-Scale Distributed Systems Tracing Infrastructure and Jaeger   The mystery of Kubelet eating CPU and IOPS Fortran Web Framework: it’s not irrelevant, really! Halvar Flake on Twitter

<p>Prodfiler is a new tool that provides fleet-wide full-system continuous profiling. It is in some ways the second act of its co-creator <a href="https://twitter.com/halvarflake" rel="nofollow" target="_blank">Thomas Dullien</a>, who is an internationally-renowned reverse engineer and vulnerability researcher under the name Halvar Flake. Thomas joins us to discuss his career, what you should profile in a distributed system, and why you can’t sell something with a negative cost.</p> <p>Do you have something cool to share? Some questions? Let us know:</p> <ul> <li>web: <a href="https://kubernetespodcast.com" rel="nofollow" target="_blank">kubernetespodcast.com</a></li> <li>mail: <a href="mailto:kubernetespodcast@google.com">kubernetespodcast@google.com</a></li> <li>twitter: <a href="https://twitter.com/kubernetespod" rel="nofollow" target="_blank">@kubernetespod</a></li> </ul> <h3>Chatter of the week</h3> <ul> <li><a href="https://www.thenationalnews.com/mena/egypt/2021/09/09/breaking-news-suez-canal-blocked-as-container-ship-runs-aground/" rel="nofollow" target="_blank">Container blocakges</a></li> <li><a href="https://www.dailymail.co.uk/news/article-9962505/Five-bedroom-NYC-home-entirely-21-containers-trendy-Williamsburg-goes-sale-5M.html" rel="nofollow" target="_blank">Container houses</a></li> </ul> <h3>News of the week</h3> <ul> <li>Crossplane moves to incubation in CNCF:<br><ul> <li><a href="https://www.cncf.io/blog/2021/09/14/crossplane-moves-from-sandbox-to-cncf-incubator" rel="nofollow" target="_blank">CNCF coverage</a></li> <li><a href="https://blog.crossplane.io/crossplane-cncf-incubation/" rel="nofollow" target="_blank">Crossplane coverage</a></li> <li><a href="https://kubernetespodcast.com/episode/141-crossplane/" rel="nofollow" target="_blank">Episode 141, with Daniel Mangum</a></li> </ul> </li> <li><a href="https://cloud.google.com/blog/products/storage-data-transfer/google-cloud-launches-backups-for-gke" rel="nofollow" target="_blank">Backup for GKE</a></li> <li><a href="https://cloud.google.com/blog/topics/google-cloud-next/google-cloud-next21-session-catalog-is-live" rel="nofollow" target="_blank">Google Cloud Next session catalog is live</a> <ul> <li><a href="https://cloud.withgoogle.com/next?utm_source=kubernetes&amp;utm_medium=audio&amp;utm_campaign=FY21-Q4-global-ES903-onlineevent-er-next-2021&amp;utm_content=kubernetes-podcast-july21&amp;utm_term=-" rel="nofollow" target="_blank">Register here</a></li> </ul> </li> <li><a href="https://goo.gle/K8s-multi-cluster" rel="nofollow" target="_blank">Kubernetes multi-cluster panel on October 6</a></li> <li><a href="https://cloud.google.com/kubernetes-engine/docs/release-notes#September_14_2021" rel="nofollow" target="_blank">GKE updates</a>: publishing with Private Service Connect, CSI driver for Filestore GA, SSL policies &amp; HTTPS redirects for multi-cluster Ingress</li> <li><a href="https://unit42.paloaltonetworks.com/azure-container-instances/" rel="nofollow" target="_blank">Azurescape: attack on Azure Container Instances</a> by Unit 42 at Palo Alto Networks</li> <li><a href="https://groups.google.com/g/kubernetes-announce/c/-e9OlTcED5E/m/fEFtkU0DCQAJ" rel="nofollow" target="_blank">CVE-2021-25741</a> for subpath mount symlink attack (High)</li> <li><a href="https://groups.google.com/g/kubernetes-announce/c/-2Dx8JdbzAo/m/DfRz61oDCQAJ" rel="nofollow" target="_blank">CVE-2020-8561</a> for webhook response logging (Medium)</li> <li><a href="https://research.nccgroup.com/2021/09/09/nsa-cisa-kubernetes-security-guidance-a-critical-review/" rel="nofollow" target="_blank">NCC Group weighs in on NSA guidance</a></li> <li><a href="https://venturebeat.com/2021/09/09/open-source-security-scanning-platform-snyk-raises-530m/" rel="nofollow" target="_blank">Snyk raises $530m</a> <ul> <li><a href="https://kubernetespodcast.com/episode/140-security-and-snyk/" rel="nofollow" target="_blank">Episode 140, with Kamil Potrec</a></li> </ul> </li> <li><a href="https://cloud.google.com/blog/products/databases/sqlcommenter-merges-with-opentelemetry" rel="nofollow" target="_blank">Sqlcommenter merges with OpenTelemetry</a></li> <li><a href="https://www.kubermatic.com/blog/kubermatic-kubernetes-platform-2-18-is-here/" rel="nofollow" target="_blank">Kubermatic 2.18</a> and <a href="https://www.kubermatic.com/blog/life-is-hard-kubeone-1-3-makes-it-easier/" rel="nofollow" target="_blank">KubeOne 1.3</a> <ul> <li><a href="https://kubernetespodcast.com/episode/109-kubermatic/" rel="nofollow" target="_blank">Episode 109, with Sebastian Scheele</a></li> </ul> </li> <li><a href="https://tanzu.vmware.com/content/blog/general-availability-vmware-tanzu-kubernetes-grid-1-4" rel="nofollow" target="_blank">Tanzu Kubernetes Grid 1.4</a></li> <li><a href="https://mattklein123.dev/2021/09/14/5-years-envoy-oss/" rel="nofollow" target="_blank">5 years of Envoy OSS</a> <ul> <li><a href="%E2%80%8B%E2%80%8Bhttps://kubernetespodcast.com/episode/033-envoy/" rel="nofollow" target="_blank">Episode 33, with Matt Klein</a></li> </ul> </li> </ul> <h3>Links from the interview</h3> <ul> <li><a href="https://thomasdullien.github.io/about/" rel="nofollow" target="_blank">Thomas Dullien/Halvar Flake</a></li> <li><a href="https://de.wikipedia.org/wiki/Mathematik" rel="nofollow" target="_blank">Mathematik, with a K</a></li> <li><a href="http://pearlsofrawnerdism.com/life-and-maths/" rel="nofollow" target="_blank">Stages of life vs. maths ability required</a>, by Pearls of Raw Nerdism</li> <li><a href="https://en.wikipedia.org/wiki/Vicky_the_Viking" rel="nofollow" target="_blank">Vicky the Viking</a> TV show</li> <li><a href="https://www.goodreads.com/book/show/539154.Assembly_Language_Master_Class" rel="nofollow" target="_blank">Assembly Language Masterclass</a></li> <li><a href="https://www.pagetable.com/?p=1449" rel="nofollow" target="_blank">GEOS copy protection</a> by Michael Stiel</li> <li><a href="https://en.wikipedia.org/wiki/Time_travel_debugging" rel="nofollow" target="_blank">Time travel debugging</a></li> <li><a href="https://www.zdnet.com/article/german-hacker-denied-entry-into-u-s-for-black-hat-training/" rel="nofollow" target="_blank">“German hacker denied entrance into US for Black Hat training”</a></li> <li><a href="http://blog.zynamics.com/2011/03/01/zynamics-acquired-by-google/" rel="nofollow" target="_blank">Zynamics acquired by Google</a> <ul> <li><a href="https://www.zynamics.com/bindiff.html" rel="nofollow" target="_blank">BinDiff</a></li> <li><a href="https://www.zynamics.com/binnavi.html" rel="nofollow" target="_blank">BinNavi</a></li> </ul> </li> <li><a href="https://googleprojectzero.blogspot.com/" rel="nofollow" target="_blank">Project Zero</a></li> <li>“For whom?”, asked <a href="https://en.wikipedia.org/wiki/Robert_Morris_(cryptographer)" rel="nofollow" target="_blank">R Morris Sr.</a></li> <li><a href="https://web.archive.org/web/20190607200517/https://optimyze.cloud/#services" rel="nofollow" target="_blank">optimyze.cloud’s original business model</a></li> <li><a href="https://prodfiler.com/blog/introducing-prodfiler/" rel="nofollow" target="_blank">Introducing Prodfiler</a></li> <li><a href="https://en.wikipedia.org/wiki/Profiling_(computer_programming)" rel="nofollow" target="_blank">Profiling</a></li> <li><a href="https://research.google/pubs/pub35290/" rel="nofollow" target="_blank">The Datacenter As A Computer: An Introduction to the Design of Warehouse-Scale Machines</a></li> <li><a href="https://research.google/pubs/pub36575/" rel="nofollow" target="_blank">Google-Wide Profiling: A Continuous Profiling Infrastructure for Data Centers</a> <ul> <li><a href="https://research.google/pubs/pub36356/" rel="nofollow" target="_blank">Dapper, a Large-Scale Distributed Systems Tracing Infrastructure</a> and <a href="https://www.jaegertracing.io/" rel="nofollow" target="_blank">Jaeger</a></li> </ul> </li> <li><a href="https://prodfiler.com/blog/the-mystery-of-kubelet-eating-cpu-and-iops/" rel="nofollow" target="_blank">The mystery of Kubelet eating CPU and IOPS</a></li> <li><a href="https://fortran.io/" rel="nofollow" target="_blank">Fortran Web Framework</a>: it’s not irrelevant, really!</li> <li><a href="https://twitter.com/halvarflake" rel="nofollow" target="_blank">Halvar Flake</a> on Twitter</li></ul>

Prodfiler, with Thomas Dullien

Writing Better Code to Optimyze Cloud Spend with Thomas Dullien