Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

KUBERNETES REMOTE CODE EXECUTION VIA NODES/PROXY GET PERMISSION

An authorization bypass in Kubernetes allows service accounts with nodes/proxy GET permissions to execute commands in any Pod across the cluster, potentially leading to full cluster compromise. The vulnerability stems from the Kubelet authorizing WebSocket connections based on the initial HTTP GET handshake rather than verifying CREATE permissions for the /exec endpoint, affecting 69 Helm charts, including Prometheus, Datadog, Grafana, and Cilium. Kubernetes Security Team closed this as "Won't Fix (Working as Intended)," recommending migration to KEP-2862's fine-grained authorization when it reaches GA in April.

BLACKROCK FILES FOR BITCOIN PREMIUM INCOME ETF

BlackRock has filed with the SEC to launch the iShares Bitcoin Premium Income ETF, which would use a covered call strategy to generate income by selling call options on bitcoin exposure managed through the firm's existing iShares Bitcoin Trust (IBIT), trading potential upside for premium distributions to investors. The filing follows similar existing crypto income products, including Roundhill's YBTC, Amplify's BAGY, and NEOS's BTCI, though BlackRock's entry stands out due to IBIT's dominance as the largest spot bitcoin ETF with over $69.7 billion in assets and the firm's $12.5 trillion in total assets under management. Covered call bitcoin ETFs have historically underperformed BTC spot returns, which is typical by design given the higher yields offered, with BTCI down 31.3%, YBTC down 45%, and BAGY down 25% over relevant periods compared to bitcoin's 14% drawdown over the past 12 months.

TRY TEXT SCALING SUPPORT IN CHROME CANARY

The new 'meta name=text-scale' HTML tag informs browsers that websites are designed to still work if users increase their OS text size. To support text scaling, developers should avoid overriding the initial font size, only use font-relative units for content, and test on devices to quickly figure out problem areas and think about how to adapt their layouts. The tag is currently supported in Chrome Canary with the 'Experimental Web Platform features' flag enabled. Support in other browsers will hopefully come later this year.

TLDR IndexPage 1