Top all-time · #3289
Palo Alto Networks
Company blog · twistlock.comsecuritysystems
Palo Alto Networks is the company blog at twistlock.com, writing about security and systems. Since 2015, 23 different Hacker News readers have linked it 53 times, most often “Twistlock – Container Security and Docker Security Platform”. It is still writing: the last post was on 2026-10-26, and you can follow it by feed.
Too few sampled comments (15) to say how often HN recommends it.?
Why HN links it
HN readers mostly link Twistlock's labs blog for container security research, such as posts on escaping Docker containers and breaking Docker via runc. Many other comments are Twistlock job postings.
Summarised by Claude from a sample of 15 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Prisma Cloud is the most complete Cloud Native Application Protection Platform (CNAPP) for code to cloud security in any cloud, multicloud, and hybrid environment.
Most-linked posts?
- Twistlock – Container Security and Docker Security Platform3 people · 9 mentions · first linked 2015-07-06
- Non-root containers, Kubernetes CVE-2019-11245 and why you should care2 people · 2 mentions · first linked 2019-08-29
- /labs-blog/escaping-docker-container-using-waitid-cve-2017-5123/2 people · 2 mentions · first linked 2018-11-10
- Tracking Down Exposed Kubernetes Instances in the Wild2 people · 2 mentions · first linked 2018-11-13
- Kubernetes Secrets Encryption2 people · 2 mentions · first linked 2017-09-03
- Demystifying Kubernetes CVE-2018-1002105 (and a dead simple exploit)2 people · 2 mentions · first linked 2018-12-09
- Breaking Out of Docker via RunC2 people · 2 mentions · first linked 2019-02-22
- Breaking Out of Rkt Containers – 3 New Unpatched CVEs2 people · 2 mentions · first linked 2019-05-30
- Dear Developers, Beware of DNS Rebinding: DNS Rebinding and CSRF with Etcd2 people · 2 mentions · first linked 2018-02-28
What Hacker News says?
Twistlock | Software Engineer (full-stack), Researcher | Herzliya Israel ONSITE | https://www.twistlock.com/ At Twistlock you’ll find a bunch of geeks who love security and are passionate about new technologies. Our goal is to develop a cutting-edge, enterprise security product that makes Docker containers safe to use for mission critical tasks in large organizations across all sectors. Twistlock, a well-funded comp…
Comment linking /
on “Ask HN: Who is hiring? (November 2016)”Submitted Escaping Docker container using waitid() – CVE-2017-5123 as a story · 444 points
HN discussionTwistlock ( https://www.twistlock.com/ ) | Herzliya, Israel | ONSITE | FULLTIME At Twistlock you’ll find a bunch of geeks who love security and are passionate about new technologies. We aim to develop a cutting-edge enterprise security product that adapts traditional security to a world of Linux containers. Twistlock, a well-funded and VC-backed company, seeks a small number of top-tier, full-stack software engineer…
Comment linking /
on “Ask HN: Who is hiring? (July 2015)”Submitted Show HN: Hiding code from Git diff as a story · 167 points
HN discussionI know it's kinda old but think about how many exploits are out there in the jungle. https://www.twistlock.com/labs-blog/escaping-docker-containe...
Comment linking /labs-blog/escaping-docker-container-using-waitid-cve-2017-5123/
on “Cloud Computing Without Containers”Submitted Breaking Out of Docker via RunC as a story · 116 points
HN discussionContainers (and virtualisation) are helpful but. not bulletproof. If your threat model is already malicious code with ill intent, you probably want higher grades of privsep / sandboxing. E.g., https://www.twistlock.com/labs-blog/escaping-docker-containe... https://www.exploit-db.com/exploits/46978 Full virtualisation does far better, though I believe there've been exploits there as well. Yes, from 2015: https://thre…
Comment linking /labs-blog/escaping-docker-container-using-waitid-cve-2017-5123/
on “Two malicious Python libraries caught stealing SSH and GPG keys”Submitted Exploiting Alpine Linux as a story · 91 points
HN discussionTwistlock | Software Engineer (full-stack), Researcher | Herzliya Israel ONSITE | https://www.twistlock.com/ At Twistlock you’ll find a bunch of geeks who love security and are passionate about new technologies. Our goal is to develop a cutting-edge, enterprise security product that makes Docker containers safe to use for mission critical tasks in large organizations across all sectors. Twistlock, a well-funded and…
Comment linking /
on “Ask HN: Who is hiring? (October 2016)”Submitted CVE-2017-16544: A Busybox autocompletion vulnerability as a story · 49 points
HN discussionTwistlock | Israel - Herzliya | ONSITE | Software Engineer We build cutting edge security suite for containers. See more under https://www.twistlock.com We work with Golang, Node, Angular, Docker, and rkt. The interview consists of a non technical intro meeting, a take-home coding challenge, and a follow-up discussion. dima@twistlock.com
Comment linking /
on “Ask HN: Who is hiring? (May 2016)”Submitted Exploitable buffer overflows found in apk (Alpine Linux's package manager) as a story · 19 points
HN discussionTwistlock ( https://www.twistlock.com/ ) | Herzliya, Israel | ONSITE | FULLTIME At Twistlock you’ll find a bunch of geeks who love security and are passionate about new technologies. We aim to develop a cutting-edge enterprise security product that adapts traditional security to a world of Linux containers. Twistlock, a well-funded and VC-backed company, seeks a small number of top-tier, full-stack software engineer…
Comment linking /
on “Ask HN: Who is hiring? (November 2015)”Submitted Deep dive on the most severe Kubernetes vulnerabilities – CVE-2017-1002101/2 as a story · 15 points
HN discussionTwistlock ( https://www.twistlock.com/ ) | Herzliya, Israel | ONSITE | FULLTIME At Twistlock you’ll find a bunch of geeks who love security and are passionate about new technologies. We aim to develop a cutting-edge enterprise security product that adapts traditional security to a world of Linux containers. Twistlock, a well-funded and VC-backed company, seeks a small number of top-tier, full-stack software engineer…
Comment linking /
on “Ask HN: Who is hiring? (August 2015)”Submitted Disclosing a directory traversal vulnerability in Kubernetes copy as a story · 14 points
HN discussionNot sure if you are looking for a commercial solution, but we (Twistlock [1]) develop a security suite for enterprises working with Docker and / or Kubernetes. In fact, we are officially recommended by Google for working with GKE which is very much based on Kubernetes [2]. I'd be glad to elaborate if relevant. [1] https://www.twistlock.com/ [2] https://cloudplatform.googleblog.com/2015/11/enhancements-to...
Comment linking /
on “Building a Bank with Kubernetes [slides]”Submitted Non-root containers, Kubernetes CVE-2019-11245 and why you should care as a story · 8 points
HN discussionTwistlock ( https://www.twistlock.com/ ) | Herzliya, Israel | ONSITE | FULLTIME At Twistlock you’ll find a bunch of geeks who love security and are passionate about new technologies. We aim to develop a cutting-edge enterprise security product that adapts traditional security to a world of Linux containers. Twistlock, a well-funded and VC-backed company, seeks a small number of top-tier, full-stack software engineer…
Comment linking /
on “Ask HN: Who is hiring? (October 2015)”Submitted Breaking Out of Rkt Containers – 3 New Unpatched CVEs as a story · 6 points
HN discussionNot sure if this is what grandparent is referring to, but DNS rebinding[0] is what springs to mind. It's simultaneously kind of smart and also really stupid. Basically, you give a valid 3rd-party domain multiple IPs, one of them normal and one of them resolving to a local IP. Then you cut off the normal one and the browser just allows you to make calls to whatever local interface you want. There was a good defcon vi…
Comment linking /2018/02/28/dear-developers-beware-dns-rebinding/
on “Don’t Let Facebook, or Any Tracker, Follow You on the Web”Submitted Introduction to Serverless Security, Part 1 as a story · 6 points
HN discussionExcellent point :) So. First of all, you'd not have to worry about following, if you don't use containers. If your app, running in Docker container, is compromised, like PHP webshell, it might try to escape the container. What capabilities you granted for your containers? CAP_SYS_ADMIN, CAP_NET_ADMIN or you have no idea? This is just one example of escaping https://www.twistlock.com/2017/12/27/escaping-docker-contai…
Comment linking /2017/12/27/escaping-docker-container-using-waitid-cve-2017-5123
on “A Tutorial Introduction to Kubernetes”Submitted Demystifying Kubernetes CVE-2018-1002105 (and a dead simple exploit) as a story · 5 points
HN discussionFrom a production Swarm operator without much experience with k8s: When you create a new Swarm cluster with `docker swarm init`, Swarmkit creates PKI that is used for everything onward: gRPC cluster state communication, encrypted overlay networks, secrets, and so on. Keys are automatically rolled every 12 hours by default. This is done automatically and transparently to the operator, without any effort on their part…
Comment linking /2017/08/02/kubernetes-secrets-encryption/
on “Adding Kubernetes support to the Docker platform”Submitted Securing Kubernetes for OpenFaaS and beyond as a story · 5 points
HN discussionWe use Twistlock ( https://www.twistlock.com/ ) as it does the CVE scanning but you can setup rules for compliance, binary monitoring and a whole plethora of other security/auditing type things. It also has a jenkins plugin so you can fail builds if a certain threshold of CVEs/compliance failures are introduced by developers (the only way to actually get the team to care about security). Our security folks haven't r…
Comment linking /
on “Show HN: Smallest Node.js Docker images”Submitted Dear Developers, Beware of DNS Rebinding: DNS Rebinding and CSRF with Etcd as a story · 5 points
HN discussionhttps://www.twistlock.com/labs-blog/breaking-docker-via-runc... This is from a CVE that was released a little over a month ago.
Comment linking /labs-blog/breaking-docker-via-runc-explaining-cve-2019-5736/
on “Setting Up a Software Development Environment on Alpine Linux”Submitted Gaining Persistency on Vulnerable Lambdas as a story · 4 points
HN discussion
