Viewing profile — 0xEFF

I do the same as GP on a regular 2 hour drive up I-5 I take. The vetting process is the same as if I were driving up I-5 with a gear head friend of mine having a conversation with …

It literally says spy cam in the product title.

No company reflects “we’re family” in contracts or compensation packages. That fact alone tells us the message is and always has been bullshit.

I think it’s reasonable that 95% of people would choose generational wealth for their families given the opportunity.

Is it really unquestionable?

Even so, the suggestion is a good one. Modern proxies have gotten much better at handling auth and processing the traffic as the GP describes. Service meshes have these features bu…

A bank is a bad example. The only thing we use bank websites for is to check our transactions and transfer money. My business checking account has started offering partner promotio…

See for yourself, 4.0 is clearly improved over 3.5.

Every access and id token issued by oidc already has an issued at (iat) and expiration (exp) fields.

Splunk has delivered this level of innovation and quality since 2007 when I first used it. We used Splunk to associate a change request ticket number all the way through the change…

It’s historically been abbreviated AAA “triple A” for Access, Authentication, and Authorization. Each being a separate system, VPN’s and Firewalls traditionally controlling access …

RedHat has traditionally.

The platform slack with over 10,000 users uses linen. It’s good. Wonder how long it will last though.

There are loads of startups offering platforms as a service for about half the cost per year of one devops engineer.

No, the best organizations have a happy path laid out for org chosen tools and a platform that supports adding in “non standard” tools / libraries by individuals and teams as neede…

Edit: the term service principal is current and isn’t specific to Kerberos https://istio.io/latest/docs/concepts/security/#principals

Not at L6. Scarface is right, most of the time the org just knows something is wrong and they don’t know what it is exactly or how to fix it. Sometimes they don’t even know somethi…

This is a good analogy. For more context in the past 5 years working with customers in the Bay Area I’ve not encountered one who mentioned linkerd let alone ran it in production. M…

The sweet spot is for someone with deep experience to lay down the skeletal structure of the tests, rpc, infra, lifecycle, etc… then hand it off to a broader team who could learn t…

Why are discussions of web development and JavaScript unique in that we can’t discuss alternative methods and trade offs without the discussion devolving into personal attacks and …

Yes, it’s meaningful. If Google doesn’t fix search in the next decade then Bing (or some other winner) will be the service earning Google’s ARR in 11 hours.

These reasons related to deployment, but there's also lots of value in the security aspects of the control plane. * automatic service account for each workload * automatic service …

A single EC2 instance is an equally bad trade-off on the opposite side of the spectrum from over architected SQS, SNS, etc… The ideal trade off is a single Kubernetes cluster with …

Is it really easier? Yes. The project I’m currently building is an enterprise b2b SaaS and I’ve gotten it fully functional without writing a single line of JavaScript. By functiona…