3 ms·

Just like security, you settle for the risk you can afford and are comfortable with. The cloud muddies your grasp of the risks though. A lot of these cloud off

by rapind 4y ago

Just like security, you settle for the risk you can afford and are comfortable with. The cloud muddies your grasp of the risks though. A lot of these cloud offerings (like k8s) are incredibly complex, and therefore have a lot of attack vectors, and a lot of points of failure. We depend on layers built on layers, built on layers. You can't really eliminate all of these dependencies, but you can eliminate / reduce some of the highest risk ones (topmost layers).

heywoodlh 4y ago
> Just like security, you settle for the risk you can afford and are comfortable with Right, I totally agree. What I'm not a fan of is this site actively encouraging people to call out others for not owning their own content. If we are gonna compare to security, it would be like suggesting everyone should adhere to the same threat model -- which just isn't practical. > The cloud muddies your grasp of the risks though. Are you saying "you" generally or me specifically? Because I was just using a CDN built on AWS as an example of not being able to own all parts of your stack. It's mostly impossible for an individual and most companies to build a CDN on their own hardware as most entities don't have datacenters around the world.
- rapind 4y ago
  > Are you saying "you" generally or me specifically? Generally, as in all of us.
  - heywoodlh 4y ago
    Ah, yeah. I see what you mean. I run a K8s cluster at home (I also work with AWS EKS) and in a lot of ways I see the upsides of what you gain with K8s. I also see why a ton of people won't ever need the complexity of K8s and I can see how the complexity/downsides would outweigh the benefits in the majority of situations.