Viewing profile — wowohwow

FWIW, I think it was a great write up. It's clear to me what the rationale was and had good justification. Based on the people responding to all of my comments, it is clear people …

>We must be precise in our language I am talking about using a shared software repository as a dependency. Which is valid for a microservice. Taking said dependency does not turn a…

Bingo. Couldn't agree more. The other posters in this comment chain seem to view things from a dogmatic approach vs a pragmatic approach. It's important to do both, but individuals…

To reference my other comment. This thread is about the nuance of if a dependency on a shared software repository means you are a microservice or not. I'm saying it's immaterial to…

Yes we are in agreement. A dependency on an external software repository does not make a microservice no longer a microservice. It's the deployment configuration around said depend…

Yes, the user I'm replying to is suggesting that taking on a dependency of a shared software repository makes the service no longer a microservice. That is fundamentally incorrect.…

Fair enough, which is why I called out my assumption:). I'm referring to the all hands on deck nature of responding to security issues not the best practice. For many, the NPM issu…

You have not been in the field very long than I presume? There's multiple per year that require all hands on deck depending on your tech stack. Just look at the recent NPM supply c…

This type of elitist mentality is such a problem and such a drain for software development. "Real micro services are incredibly rare". I'll repeat myself from my other post, by thi…

I disagree. Both can be true at the same time. A good design should not point to library-latest in a production setting, it should point to a stable known good version via direct r…

I think your point while valid, it is probably a lot more nuanced. From the post it's more akin to an Amazon shared build and deployment system than "every library update needs to …

Going solo on https://meldsecurity.com/ I'm putting a bunch of security tools / data feeds together as a service. The goal is to help teams and individuals run scans/analysis/secur…

History doesn't repeat itself, but it rhymes. Callbacks to the infrastructure laid out during dotcom bubble, i.e Cisco, and all of the networking infrastructure. Likewise, internal…

Going solo on https://meldsecurity.com/ I'm putting a bunch of security tools / data feeds together as a service. The goal is to help teams and individuals run scans/analysis/secur…

Hi all! A few things of note -- I want this to remain a freemium service, where a reasonable amount of scans / capabilities are free per month etc. This is a passion project for he…

Not stealing thunder! I'm glad you work in the field and agree with my conclusions!

A very effective TL;DR of my post :) -- with the addition of companies laying off due to lower spending, which leads to more delinquencies, than more layoffs, etc

I think if you're ok with some markup you should be fine with any. At some point, it becomes so large users will leave the platform. Finding the right balance is not a guarantee

A mini shop seems possible on the iPhone. Does Apple prevent sideloading? I'm not familiar enough with the ecosystem. How does Apple scare customers? By giving them a warning about…

In the age of floppy disk and CD distribution of software, what was a retailers markup/cut? I imagine, Staples, Best Buy, CompUSA, Office Depot, etc were taking 30%+. Shelf space, …

Here's my analysis on the trends in Vulnerability Management and the related changes for CVEs published in 2024.