Viewing profile — rtempaccount1

Let me guess, Big-4? boutiques in the UK don't usually charge that kind of day-rate and the big banks all use their purchasing power to get day rates down. £800/day is low, but not…

Very interesting article, if a bit worrying for the UK's economy in the short/medium term. I think it could well be right that they're hoping for the (likely impossible) blink from…

Indeed they are not. What I find a bit puzzling is that the UK Gov. absolutely had an easy escape hatch from the cliff edge of end of 2020, by saying "we've got to delay due to the…

I'd imagine it depends on how much attention the operators in this marketplace have been paying. If they've believed UK Government rhetoric about how Brexit will be a smooth proces…

kube-ps1, kubectx and kubens can help quite a bit here. kube-ps1 to give you a visual indication of current context and the others to make switching easier. You can also explicitly…

Interesting looking project, although at the moment it's only useful for a small range of issues. One of the harder parts of vulnerability scanning is building and maintaining the …

The people who "win" at Pyramid schemes aren't (IMO OFC) winning through luck, they're winning by being the people that set them up. And in the US and many other countries gambling…

Ultimately the end of any pyramid scheme is a large number of people losing money , often money they can't afford to lose. It doesn't seem likely to be in the interests of most gov…

I'd agree that k8s has a lot of functionality built-in, another important thing to realise is what k8s doesn't do. In addition to the well-known integration points (Container Runti…

The problem with Uber et al, is not that they cannot become profitable, but that they cannot become sufficiently profitable to justify their valuations. Uber has burned through man…

That theory implies a significant barrier to entry for new competitors. In some markets that is justified. Those where significant infrastructure is needed to compete. For example …

Within the same pod sure, they share the same netns. I was talking about individual container comms. With rootless podman they use slirp4netns and all get the same IP, with rootful…

LXC takes quite a different approach to containerization compared to Docker (e.g. running full systems in containers by default, instead of a single application process) What is it…

Podman when not run as root has some significant drawbacks (e.g. containers can't communicate with each other). That's not specific to podman it's just hard to do without root. Pod…

complexity and overhead. Maintaining Kubernetes is non-trivial (IMO ofc). It has a 9 month support lifecycle, so you need to redeploy everything regularly. There are also API depre…

I think what type of k8s environment you use very much depends on what you're looking to get out of it. If it's experience deploying applications into containerized environments, t…

except of course where the system is ossified and you can no longer make changes for fear of affecting that lack of downtime. In the organizations I've seen with mainframes, what h…

There is a middle ground between those two extremes of course. I'm not surprised at the mainframe's lack of success at all, the barriers to entry are extreme, meaning there's an in…

In many cases (e.g. banks) these systems have been running for decades, they're often badly documented and have had a lot of fixes applied for issues that arise. Re-writing that, i…

I was at a talk about mainframe security recently where the state of play with one company was, there were three users in their admins group for the mainframe, two had retired, and…

The user who runs the docker command can indeed always get root (with a default install, assuming you're not using rootless) but the process inside the container isn't going to nec…

Docker has a number of security layers that can make breakout more challenging, specifically dropped capabilities, a seccomp filter and (on debian/ubuntu) an AppArmor profile insta…

I'd agree with your assessment that RH are more about the enterprise installs. Whilst the 4.X series of Openshift has been out as a commercial product since mid last year, there's …

Any multiple choice exam is going to not necessarily mimic the real world, but doing exams that do is pretty tricky, and I can't think of one in the pentest world that gets it righ…