Viewing profile — russjones

Teleport (YC S15) | Backend and Fullstack Engineers | US, Toronto, London, Remote OK | https://goteleport.com Do you enjoy building security and deployment tools for other engineer…

Teleport (YC S15) | Backend and Fullstack Engineers | US, Toronto, London, Remote OK | https://goteleport.com Do you enjoy building security and deployment tools for other engineer…

You only need a browser if you are using SSO. If you are using local accounts it's all done in the CLI.

Hi scarygliders, That's a good question and valid skepticism. The UI serves two purposes. The first is to manage your cluster. For example, you may want to change a users role (to …

We're trying to raise structured behavioral information about what is happening in a session to the cluster administrator. That means we don't just provide information about what's…

Thank you Abe! The kind comments are appreciated! So far we have gotten positive feedback. While this feature does not protect against root doing something malicious, it does allow…

Understandable confusion, I've seen it referred to both ways. We decided to go with BPF for this blog post since that appears to be the official abbreviation. From "BPF Performance…

Author of the post here, happy to answer any questions.

Noted.

I ran an eBPF program called opensnoop [1] to capture what files were opened during login to a system and then re-launching bash. Looks like both are read during initial login but …

Maybe I did not provide the best example, but the point I was driving at is that the restrictions here are at the application level and not at the system level. If you take the app…

Ha, nope, didn't realize this until everyone started mentioning it in the comments.

Author here, happy to answer any questions about the post.

We had a security audit of Teleport performed by Cure53 with the release of Teleport 2.2 which we released publicly. You can view the report here: https://cure53.de/pentest-report_…

Hi walrus01, If exposing Teleport (or OpenSSH or any piece of software to be honest) to the internet is a significant concern, the solution I recommend is to put it behind spiped. …

Hi Operyl, Russell from Gravitational here. We've made improvements in resource utilization for Teleport 2.0 and hunting down any further resource utilization issues is definitely …

Hi nikolay, we don't have a CloudFormation template, but we do have a containerized version of Teleport that is fully configured with multiple clusters that you can use to test wit…

Hi atonse, Russell from Gravitational here. As far as configuring your VPC having the bastion (Proxy) as the only server with a public address is reasonable. One of the nice things…

Thanks, the DO's and DON'TS were heavily inspired by a talk given by Colin Percival called "Everything you need to know about cryptography in 1 hour". You can check it out here: ht…

I don't mind the criticism constructive or otherwise. I have already sketched out where to take part 2 and filled in some of the sections. That being said the 80/20 rule applies he…