• My favourite talks and events

    I put lots of my slide decks on SpeakerDeck and collect the videos in playlists on my YouTube channel.

    My upcoming talks should all be listed on Isovalent's events page. Please get in touch if you'd like to invite me to speak at your event.

    Here is a collection of some of my favourite pieces of content that I've been involved with

    Containers from Scratch

    My most popular talk, ever

    A debugger from scratch

    Read the blog post or watch the video from dotGo Paris

    eBPF Documentary

    Watch the back story behind this incredible technology

    Defense in depth for containers, in Increment magazine

    KubeCon EU 2018

    In my role as conference co-chair I got to MC some of the keynote sessions. I gave my own keynote talk "Running with Scissors" about how Kubernetes workloads are running as root by default, as well as an update on the news from 20 CNCF projects.

    My keynote on the news from CNCF project updates, with guest speakers from the NATS, Vitess and SPIFFE projects.

    A terminal-based keynote on privileges in Kubernetes. Here are the resources so you can try running with scissors yourself.

    dotGo 2017 Paris

    In this talk I built a very simple debugger in Go, showing how you can use ptrace to set breakpoints and generate stack traces. You can find a more in-depth version of the code on my GitHub.

    DockerCon 2017

    This talk was so much fun to do - demonstrating how a container is built from namespaces & cgroups, and showing how cgroups can protect you from a fork bomb attack. I was thrilled to be awarded the Best Speaker award for it.

    Velocity London

    I was privileged to be invited to give a keynote at O'Reilly's Velocity London. Here I'm making the case that it's easier to secure a Cloud Native deployment (with containerized microservices running under an orchestrator) than a traditional monolith.

     

    My demo showed how if you can determine the expected behaviour of a piece of software, you can treat anything outside that expected behaviour as suspicious. It's hard to cover all the error cases in a monolith, but it's completely reasonable for a microservice.