Tag: security
-
NTP Security: Why Time Synchronization Is a Security Control
Accurate time synchronization is the foundation of log correlation, certificate validity, Kerberos authentication, and distributed system consistency — NTP security is infrastructure security.
-
Storage Network Segmentation: Why Your SAN Doesn’t Belong on the Same VLAN as Workstations
An iSCSI SAN on a flat network allows any host to attempt LUN discovery against all storage targets — proper SAN zoning and network isolation prevents unauthorized storage access.
-
Kubernetes RBAC Over-Permissioning: Finding and Fixing cluster-admin Sprawl
cluster-admin bindings are the sudo of Kubernetes — they bypass all RBAC controls, and in most production clusters, they are assigned to more subjects than anyone realizes.