BSidesSF 2026 - Sandboxes, Seccomp, and Syscalls: Chasing Isolation in Kubernetes (Mark Manning)

This talk by Mark Manning explores the intricacies of security within Kubernetes, focusing on the limitations of containers as security boundaries. The discussion covers real-world Kubernetes sandboxing, examining the nuances of seccomp, and the distinctions between virtualization and isolation. Attendees will gain insights into determining the level of security necessary for their workloads, as well as strategies for effectively building and managing sandboxed environments at scale.