11–20 of 20 posts
"Since the OS is unreachable" Woah slow down there what? That's a significant presumption. This 'serverless' thing is a fad.
This isn't any different from the non-FASS world, but it is a good reminder that you still need someone doing regular maintenance.
Admin'ing a system is hard work requiring a deep understanding of many different application, os and network systems, rigorous attention to detail, good communication skills and being subscribed to a variety of fractured news and alert systems to sort out what inbound patches and mitigations are relevant and what can/should be applied. Which leads me to the point of FAAS (and other managed services like Heroku, etc).…
as a system administrator, I find the summary as laughable as the FAAS movement itself. "FaaS takes on the responsibility for “patching” the underlying servers, freeing you from OS patching" So a sysadm-er, devops admin will be rolling these out and back with CI on a regular basis to dev,test and prod. "Denial of Service (DoS) attacks are naturally thwarted by the (presumed) infinite capacity Serverless offers." Unle…
OS and server stack updates aren’t a case of “more secure”. Somebody still needs to do that work, and you’re trading the responsibility of doing it for the promise that somebody else will (often with no visibility into how and when). DoS is only “solved” by “infinite capacity” insofar as you’re willing to pay for the capacity. If you have any spending caps in place, you’ll be DoSed by burning through your budget. DoS…
I don't necessarily agree with serverless thwarting DoS attacks. While technically it makes it easy to scale to accommodate the increase load (in the same way that auto-scaling will). The denial of a service is the result of your inability to pay for that "infinite" scalability. Personally I'd much rather have to deal with my service being offline for the duration of a DoS attack, then have my company go broke from h…
It ain't serverless.
"Since the OS is unreachable" Woah slow down there what? That's a significant presumption. This 'serverless' thing is a fad.
as a system administrator, I find the summary as laughable as the FAAS movement itself. "FaaS takes on the responsibility for “patching” the underlying servers, freeing you from OS patching" So a sysadm-er, devops admin will be rolling these out and back with CI on a regular basis to dev,test and prod. "Denial of Service (DoS) attacks are naturally thwarted by the (presumed) infinite capacity Serverless offers." Unle…
- A sys admin will not be rolling out OS patches. The platform does itself. - Attackers typically use DoS to make a system unavailable, not just make it expensive to operate. I do note the cost concern, but if attackers are unsuccessful taking a system down, they are less likely to attack it. - I indeed meant "attacking through the OS is unreachable", referring to the portion explaining the OS patches are better mana…