Viewing profile — kkamperschroer

As I was reading your comment I was thinking "whoa, that sounds like Damien or Robert" and sure enough :) Hope you are doing well!

I saw Plex mentioned, but personally I like Subsonic better for music specifically: http://www.subsonic.org/pages/index.jsp If you're already hosting Plex, what's one more Docker c…

I did a couple years ago. Attack Pattern ( http://attackpattern.com/ ). They are still alive and well, but I ultimately had to find a different job when I decided I wanted to go re…

A useful layman's explanation of gravitational waves and the LIGO experiement: https://www.youtube.com/watch?v=1Tstyqz2g7o

Nice! The FUSE mounting method for obtaining secrets is similar to how Keywhiz does this. Very cool and novel solution. Though, if you are unfortunate enough to still have Windows …

Fantastic. Thank you!

So if you potentially need to roll a secret you would just run your deployment playbook limited to the secrets task?

Cool, thanks! Seems like a pretty direct competitor to AWS KMS. The pricing is identical, so I guess the choice between the two is quite obvious if you are hosted in Azure or AWS.

That's very similar to the problem we are encountering. Getting the secrets to the machines at deploy time isn't too bad, but then they are available to a potential attacker. Acces…

Do you take advantage of Consul's ACL system them for limiting access to secrets? Also, do you have any form of auditing then when using consul? Thanks for your input!

That's an interesting solution. I guess this would really only work though if you are self hosted, right? Thanks!

Nice, thank you! I haven't heard of that one.

Thanks for the tip. I guess the easiest thing to do is use git-crypt with some encrypted file and have the secrets available at deploy time, but I'm worried about long term disadva…

I'm evaluating solutions for secrets management in relation to a distributed microservice architecture and am curious to hear what everyone else out there does. Some options I've c…

I found my current position at AttackPattern here on HN a year ago, and I really love it. I would highly recommend others check it out.

Currently no, but that is certainly something I could add as options to customize. Thanks for the suggestion!

Looking for some honest feedback on this idea I had for a new tab page replacement where I can keep some notes. Currently alpha as I have not cleaned up all of my original hacks fr…

Using consul ( https://www.consul.io/ ) in conjunction with HAProxy is another great way for service discovery and routing.

CenturyLink Cloud AppFog is a good alternative. I know, I know, it's CenturyLink and that's concerning to you. Cloud is like a different company entirely. Disclaimer: I helped buil…

Thanks. I'll add it to my backlog!

I'm a Chrome extension author and I've been contacted at least a half-dozen times by shady companies that want me to add some "totally unobtrusive" ad-injection javascript into my …

That is essentially the definition of financial independence, and it's certainly possibly with a job in software. It just involves saving as much as you can afford to and taking ad…

Linux with Crouton: https://github.com/dnschneid/crouton