Viewing profile — kronin

This is why I haven't adopted the practice of "Build your artifact along with the docker image that packages it". Instead, build your artifact and publish it to an artifact reposit…

> On other nitpick is that startups live and die with automation by their lean nature. They have fewer resources and must automate everything they can. It's built into startups min…

Agreed. It's sad how many security engineers still push outdated processes, when there is significant research which indicates _why_ it actually _reduces_ security.

> I think there's another word missing: "data sovereignty". Depending on your business, your customers might need to keep user PII within their country. That's assuming a single mu…

The study states: "We studied sera from adults (ages 18 to 55 years) who received two doses of the Moderna mRNA-1273 vaccine in phase 1 clinical trials (12). The majority of our st…

Or NPM is having issues ;-) https://status.npmjs.org/

Wildfires burn up all the dead brush and make way for new growth, along with fertilizing the soil.

Please share the package managers that handle this, thanks!

Can't read whether this is sarcastic or tongue in cheek ;-) Java 11 is the newest LTS release. The next LTS release will be Java 17. Many companies won't touch anything that isn't …

Have you ever found confirmation that they use OpenDistro internally? I've looked and have been unable to find such a statement.

I put one of these [1] in my office 2 years ago and am very pleased. It wasn't cheap, but I use it daily. It always wipes clean, and there is no ghosting. It's right behind my back…

You don't have to hand-write your openapi.yaml. we are using quarkus, and by annotating the endpoints you get a generated openapi.yaml. We then use this in a typescript generator t…

Is it this one? https://vimeo.com/267445424

When I interview (and yes, there's whiteboard time), I tell the candidate up front and very clearly, "I will be your Google. I know we don't work in a vacuum"

2 of starboard's capabilities are to run kube-bench and kube-hunter, and yeah, aqua has been doing some great work for the community in this space.

So if a deployment is 2 minutes of downtime, you are limited to 2 per month if you still want to hit 4 9s of availability with no unexpected outages.

If the container is running as root, and you escape the container, you are root on the host. Containers share the kernel with the host, and are only as isolated as the uid the proc…

Ekscli (if you want managed) and kops (if you want to manage it yourself) are just as straightforward.

Sounds like your setup lacks high availability. If you don't believe you need that, then yeah, kubernetes is overkill.

If you're running pods as root, you're doing it wrong. That was a no-no with docker, and it's still a no-no for kubernetes. People still run non-containerized services as root too.…

My employer did 20% across the board, 2 months ago. Security software.

There is significant value in text blob workflows. Requiring the definition of everything that makes up your stack to be stored in a format that is not text adds complexity to the …

Interested

Not stopped, no. Slowed. Give the healthcare system a chance to deal with those that are coming in, without being overwhelmed. Give the researchers a chance to come up with an immu…