Viewing profile — itaifrenkel

Amazon is forcing elastic to make money from their hosted offering, instead of their proprietary x-pack modules. Professional Services don’t scale as software do (compare AWS with …

OP here. AMA

Forter | Infrastructure Engineering Manager | Tel Aviv, Israel | Onsite, Full-Time | https://www.forter.com Forter's fraud prevention decision as a service technology is way ahead …

The problem is that OLAP is run by analysts/business/data.science people and they may mess up with their queries/workloads. without isolation the production performance could impac…

How would you run spark on top of the production db without affecting its performance?

What I'm referring to is changing the partitioning dynamically by splitting streams, not just redis nodes. Here is one implementation example http://docs.aws.amazon.com/streams/lat…

The use case I'm referring to is when the client must be sharded to avoid CPU or network or disk bottlenecks.

The consumer groups proposal breaks the FIFO abstraction of a stream by allowing multiple clients to process a single stream. Have you considered adding a semantic layer inside str…

Two comments on effectively once stream processing. 1. Consider adding an example for a stateful event stream processor client that saves the last read stream offset in redis, toge…

hi. Here is my attempt to clarify the domains section. Could you please comment on PR https://github.com/forter/security-101-for-saas-startups/pul... ?

hi. Here is my attempt to clarify this section. Could you please comment on PR https://github.com/forter/security-101-for-saas-startups/pul... ?

Please comment on https://github.com/forter/security-101-for-saas-startups/pul...

We recently released a github repo for startup security tips (HN discussion: https://news.ycombinator.com/item?id=13814991). It quickly became the 1st trending github repo for the …

There is another issue, that US citizens ussually do not encounter. When you setup a VPN on amazon, for example, you would like only some of the traffic (intranet) to go through th…

SSO is not enough. In secure systems you are ussually required to provide both network access, and applicative access restrictions

And do you find that non-techies can also handle this? Also, I think this won't cover DNS changes that a vpn client does

Same question. Do you refer to using SSH and socks proxy. If so, is that a viable solution, in your experience, with less techy employees?

Do you mean that you use it as bastion host?

After sleeping on it... I am not sure it would work with managers. They work with outside council on a day2day basis and they use attachments for that. I wonder why gmail hasn't ma…

Do you use ssh as a socks proxy?

SSH does not cover all use cases. One example if you have an internal web service, how would you restrict access only to employees (without having it open to the internet?). SSO is…

Are there any best practices you would recommend?