Top all-time · #471
Sysdig Blog
Company blog · sysdig.com/blogsecuritysystems
Sysdig Blog is the company blog at sysdig.com, writing about security and systems. Since 2015, 119 different Hacker News readers have linked it 331 times, most often “Friends don’t let friends Curl – Bash”. It is still writing: the last post was on 2026-10-28, and you can follow it by feed.
Rarely recommended · 4 of 40 sampled comments recommend it?
Why HN links it
Linked for technical container, Linux and security posts: xz backdoor detection rules, system call analysis, container isolation and eBPF write-ups. Many links are also just pointers from hiring and tool threads.
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
From runtime to development, gain real-time visibility into your cloud with Sysdig. Prioritize critical risks, detect threats instantly, and respond with confidence.
Most-linked posts?
- Friends don’t let friends Curl – Bash6 people · 6 mentions · first linked 2016-06-27
- Container Isolation Gone Wrong5 people · 5 mentions · first linked 2017-06-28
- /jobs/5 people · 5 mentions · first linked 2016-05-02
- GitHub Actions being abused to run crypto mining4 people · 4 mentions · first linked 2022-10-25
- Application and Infrastructure Monitoring4 people · 4 mentions · first linked 2015-05-12
- Fishing for Hackers: Analysis of a Linux Server Attack (2014)4 people · 4 mentions · first linked 2016-03-27
- Sysdig vs. DTrace vs. Strace (2014)4 people · 4 mentions · first linked 2016-02-27
- The 2017 Docker Usage Report3 people · 3 mentions · first linked 2017-04-13
- A troubleshooting story: Running images with mismatched” Linux kernel versions3 people · 3 mentions · first linked 2018-01-16
- Kubernetes 1.31 – What's New?3 people · 3 mentions · first linked 2024-07-26
What Hacker News says?
Sysdig [1] great monitoring platform for containers on K8S https://sysdig.com/
Comment linking /
on “Ask HN: What startup/technology is on your 'to watch' list?”Submitted Container Isolation Gone Wrong as a story · 270 points
HN discussionSysdig released a blog on friday. "For runtime detection, one way to go about it is to watch for the loading of the malicious library by SSHD. These shared libraries often include the version in their filename." The blog has the actual rule content which I haven't seen from other security vendors https://sysdig.com/blog/cve-2024-3094-detecting-the-sshd-bac...
Comment linking /blog/cve-2024-3094-detecting-the-sshd-backdoor-in-xz-utils/
on “Xzbot: Notes, honeypot, and exploit demo for the xz backdoor”Submitted Container security best practices: Ultimate guide as a story · 221 points
HN discussionSysdig | https://www.sysdig.com | jobs@sysdig.com | San Francisco, Davis, or Remote | Many Positions Sysdig is building the intelligence layer for next-generation applications built on containers and microservices. Hundreds of enterprise customers use our commercial solution for monitoring, troubleshooting, and managing performance of their applications. -50+ People -Founded by Loris Degioanni, co-creator of wiresha…
Comment linking /jobs
on “Ask HN: Who is hiring? (February 2017)”Submitted 50 Shades of System Calls as a story · 208 points
HN discussionhttps://news.ycombinator.com/item?id=6650987 https://blog.dijit.sh//don-t-pipe-curl-to-bash https://sysdig.com/blog/friends-dont-let-friends-curl-bash/ https://www.seancassidy.me/dont-pipe-to-your-shell.html
Comment linking /blog/friends-dont-let-friends-curl-bash/
on “Revolt: Open-source alternative to Discord”Submitted How we found a bug in Amazon ELB as a story · 151 points
HN discussionSysdig | Many Positions | SF, London, Serbia, Remote Sysdig ( https://www.sysdig.com ) is the container intelligence platform - we've built a unified approach to security, monitoring, and forensics for enterprises. We are a geographically distributed company from day 1 and we're proud that we're staying that way. We value capable team members everywhere in the world. We have 15+ positions open, but here is a samplin…
Comment linking /jobs/
on “Ask HN: Who is hiring? (November 2017)”Submitted The art of writing eBPF programs as a story · 137 points
HN discussionSysdig/Senior Software Engineer,Backend/San Francisco,CA/ Competitive Benefits + Salary/ https://sysdig.com/ Role: Senior Software Engineer Backend for Sysdig Secure https://grnh.se/bo0bf1r41 Product:Container Intelligence Platform.The first unified approach to container security, monitoring, and forensics. Team: Container obsessed and leading the container revolution! Join the Sysdig family; we’re rapidly growing,…
Comment linking /jobs/
on “Ask HN: Who is hiring? (April 2018)”Submitted Sysdig Inspect: A GUI for System Call Analysis as a story · 125 points
HN discussionSysdig/Senior Software Engineer,Backend/San Francisco,CA/ Competitive Benefits + Salary/ https://sysdig.com/ Role: Senior Software Engineer Backend for Sysdig Secure https://grnh.se/bo0bf1r41 Product:Container Intelligence Platform.The first unified approach to container security, monitoring, and forensics. Team: Container obsessed and leading the container revolution! Join the Sysdig family; we’re rapidly growing,…
Comment linking /jobs/
on “Ask HN: Who is hiring? (April 2018)”Submitted Implementing Open Source Container Security, Part 1: Runtime Security as a story · 102 points
HN discussionSysdig | Remote and Onsite | San Francisco, London, Belgrade | Multiple positions Sysdig makes a container intelligence platform to perform monitoring, security, and forensics for microservices. We've recently raised a series C funding round and are continuing to expand across all divisions. We have a penchant to hire technical folks in all areas of the business. Our roots are in open source technology ( https://www…
Comment linking /jobs
on “Ask HN: Who is hiring? (December 2017)”Submitted eBPF Offensive Capabilities – Get Ready for Next-Gen Malware (2023) as a story · 89 points
HN discussionSysdig | Remote, Davis & San Francisco, CA Our company offices are in San Francisco and Davis, CA, but our employees are based around the world. Many positions are available with the option to work primarily remotely. What: Think of sysdig as strace + tcpdump + htop + iftop + lsof + awesome sauce. With state of the art container visibility on top. If you want to know more, here are some blogs about using sysdig that…
Comment linking /jobs/
on “Ask HN: Who is hiring? (May 2016)”Submitted SELinux, Seccomp, Falco, and You: A Technical Discussion as a story · 85 points
HN discussionhttps://www.redhat.com/en/blog/selinux-mitigates-container-v... https://sysdig.com/blog/detecting-mitigating-cve-2022-0492-s... https://danwalsh.livejournal.com/30565.html
Comment linking /blog/detecting-mitigating-cve-2022-0492-sysdig/
on “SELinux is unmanageable; just turn it off if it gets in your way”Submitted 50 Shades of System Calls as a story · 72 points
HN discussionSysdig | https://www.sysdig.com | jobs@sysdig.com | San Francisco, Davis, or Remote | Many Positions Sysdig is building the intelligence layer for next-generation applications built on containers and microservices. Hundreds of enterprise customers use our commercial solution for monitoring, troubleshooting, and managing performance of their applications. -50+ People -Founded by Loris Degioanni, co-creator of wiresha…
Comment linking /jobs
on “Ask HN: Who is hiring? (March 2017)”Submitted Analysis on Docker Hub malicious images: Attacks through public container images as a story · 70 points
HN discussionNo, I'm sorry, I seriously don't understand how that applies in this case. How is "trusting the content you get from `apt-get`/`dpkg`/`pacman`" safer than curling-to-bash? In both cases, you are downloading and installing content from a trusted source (assuming you are curling via https to avoid MITMs). In the curl-to-bash case, you have the _ability_ to at least inspect the code first before you install it (though,…
Comment linking /blog/friends-dont-let-friends-curl-bash/
on “BirdNET-Pi: Automated, locally run bird sound identification and tracking”Submitted Fishing for Hackers: Analysis of a Linux Server Attack (2014) as a story · 69 points
HN discussionDude, if you really wanna see containers use Sysdig: https://sysdig.com/wp-content/uploads/2015/07/screen-dynamic...
Comment linking /wp-content/uploads/2015/07/screen-dynamic-topology-full.gif
on “Dockercraft: Manage Docker containers from Minecraft”Submitted Sysdig vs. DTrace vs. Strace (2014) as a story · 69 points
HN discussion(Same discussion as on lobste.rs) Thank you for this link, I've only seen the initial CVE announcement. > This is not FUD [...] The site is practicing FUD, it accomplishes communicating a message in an untruthful fashion by mixing two different things into one. (Just check out their stack overflow links, it is not clear if they are talking about root or `--privileged`) People are confused wether `docker root == host…
Comment linking /blog/7-docker-security-vulnerabilities/
on “Simple Dockerfile examples are often broken by default”Submitted Privilege escalation through Kubernetes dashboard as a story · 67 points
HN discussionSysdig has had a bunch of nice posts over the last 2-3 years: https://sysdig.com/blog/tag/technical/
Comment linking /blog/tag/technical/
on “Ask HN: Which companies have the best blogs written by their engineering team?”Submitted GitHub Actions being abused to run crypto mining as a story · 44 points
HN discussion
