Viewing profile — syscomet

Defense in depth. First, the common RPC identity and authorization system provided RPC identity to the GFS API calls, and there was a common user/group system. GFS had ACLs and so …

There are `-alpine` variants of the golang docker images, so if you're expecting to deploy to scratch or to alpine, the _builder_ step should be using `golang:1.17-alpine` instead.…

[nb: I work for the main company behind NATS] Jetstream is GA with the 2.2.0 release. Folks who believe in waiting for "not .0" won't have to wait too much longer.

Brad knows me slightly better than that and there was a bit more factoring into his decision. As I'm one of the maintainers and security/release people for Exim, a major MTA, I'd h…

Those figures are both good and depressing to know, thanks. I figured the PGP usability problems were severe enough that I did not call you out by name in the post. This aspect was…

It's a special case though. The golang.org/x/ packages are experimental but also candidates for promotion to the standard library. Eg, "context". But this sort of issue is exactly …

blog-post author here, others are addressing the other points, but I wanted to answer Q1: CVEs are for tracking response to issues, so that people can clearly communicate about wha…

blog-post author here: all of them written in Golang which use SSH. Packer, Terraform, Vault, all of them. Using a bastion host in your configurations doesn't help if you invoke th…

For etcd: https://coreos.com/etcd/docs/0.4.7/etcd-api/ node.modifiedIndex appears sensible for fencing.

In the linked consul documentation, we see a `LockIndex` field in the lock state; https://www.consul.io/docs/agent/http/kv.html confirms that "LockIndex is the number of times this…