gz5

10 ms·

91.
by gz5 3y ago
I think we will see tidal waves of 'not-so-good' AI-generated content. Not that AI can't generate or help generate 'good' content, but it will be faster and cheaper to generate 'not-so-good'. These waves
92.
by gz5 3y ago
I have found HRV to be remarkably accurate at 'predicting' illness (seeming to indicate that HRV is impacted before I notice symptoms). Do others see the same? I do need to account for 3 other variables: + did i drink alcohol tha
93.
by gz5 3y ago
And the tyranny extends because most of the money goes to those who can (theoretically) get geometric growth - get lots of us during our Marl moments. If the pendulum swings the other way - meaning we each have less Marl moments - more of u
94.
by gz5 3y ago
Telosa is a similar idea on a larger scale. They are targeting 5M people population by 2050. Original idea was the citizens all have equity in the value of the combined land. https://en.wikipedia.org/wiki/Telosa http
95.
by gz5 3y ago
linkedin also just made this an option (and are soft pushing it). payment apps likely started the trend - stripe, venmo - but that was driven (afaik) by kyc. maybe x/twitter, linkedin etc. plan to add financial transactions and will ne
96.
by gz5 3y ago
and initiatives to make devs/ops/systems use vpn, bastion, static permitted IPs, etc. are often DOA due to their impacts on automation and speed. a foss alternative is kubeztl - it takes kubectl off the networks - no public IP at
97.
by gz5 3y ago
Very well written and illustrated, thank you. When using a local vector db, what is the security model between my data and Airbyte? For example, do I need to permit Airbyte IPs into my enviro, and is there a VPN type option for private con
98.
by gz5 4y ago
Good article (along with parts 2 and 3). Are there key differences in secure networking constructs (TLS, mTLS, VPN, whitelisted IPs, open ports, etc.) in the options described: + inbound to Kafka clusters and Kafka Connect? + inbound to Mo
99.
by gz5 4y ago
No silver bullet but many of these types of attacks would be mitigated, or at least made much more expensive and difficult for the attackers, if we had wider adoption of Yubikey, Webauthn etc. type otp solutions which are more resistant to
100.
by gz5 4y ago
APIs are usually public (exposed to the Internet). This is why issues in authentication, authorization, configuration are commonly exploited. That might be ok if you are Stripe and you have tens of millions of dollars of people and infrast
101.
by gz5 4y ago
absolutely. in the case of openziti, the x.509 is the first authentication gate (optionally paired with ziti posture checks and mfa). everything from there is least privileged, attribute-based access, at a service level. default is close
102.
by gz5 4y ago
yes, can be tricky, as you state. see above for the openziti approach.
103.
by gz5 4y ago
your overlay network fabric infrastructure - ziti edge routers - leverage the ziti edge client API to submit CSRs for new certs x days before expiry. for client endpoints, there are currently 2 choices and at least 3 in the future: 1. admin
104.
by gz5 4y ago
Andrej's podcast with Lex Friedman touched on this too - worth listening to if this topic is of interest. The pod was in the past year, so many years after Andrej's software 2.0 post, and after many years of great AI experience at
105.
by gz5 4y ago
And WAF isn't the only design option for webhooks. WAF = define what to block. Another options is to define what to accept (block all else by default). OpenZiti approach (1) for example: a. enroll each side of the webhook w/ X.50
106.
by gz5 4y ago
If your needs can be summed as 'only trust entities which you explicitly trust, while doing continuous verification and least privilege', then use something like OpenZiti or WireGuard. To be fair, most orgs don't have those
107.
by gz5 4y ago
yes, zrok is open source and tailscale is not. zrok has a private share mode in which you share the resource without any internet exposure (not even temporary) - nice for security and cases where you need 2 or more private enviros (rfc 1918
108.
by gz5 4y ago
Short description from the blog: zrok works a lot like other on-demand reverse proxy, except instead of exposing the private endpoint through a public HTTP listener, it binds the shared resource onto an OpenZiti network, where it can be acc
109.
by gz5 4y ago
This was more about DNA than protocols. + Telcos build massive businesses as monopolies in regulated enviros. Their budgets, people and processes were built in this biome. + Meanwhile, their services and OSS/BSS were built in the pack
110.
by gz5 4y ago
Fascinating. It seems sensible (to a layman) that something would eat viruses but how would we construct tests (not trolling) to determine: 1. if the Halteria were not eating something_else, and that something_else was infected by the viru
111.
“Internet in Space” Will Transform the Satellite Imagery Industry: Part II(joemorrison.substack.com)
4 points by gz5 4y ago|0 comments
112.
by gz5 4y ago
a private key signed cert as an identity or a part of an identity construct can certainly be important in many domains, but isn't that independent of 'web3'? or are you referring to specific 'web3' projects?
113.
by gz5 4y ago
There are also efforts to build standards to enable connectivity to multiple competing satellite networks, e.g. DARPA's initiative: https://www.darpa.mil/news-events/2022-08-10
114.
by gz5 4y ago
What is blocked "by any sensible company"? For example, the initial outbound TCP from my local client to setup the tunnel?
115.
by gz5 4y ago
Needs to be looked at from all angles including: + Shared physical infra Trans-oceanic cables being the most fragile. However, the risk here would not immediately be of the power-food-shelter variety. Satellite-based comms will potential
116.
by gz5 4y ago
Reminds me of this terrific rant comparing Google and AWS: https://gist.github.com/chitchcock/1281611 The great HN discussion on that rant linked at the bottom of that post.
117.
by gz5 4y ago
agree you would radiate it away - but why does that need to be inefficient at scale (understood there are upfront costs)? meanwhile cooling is a huge expense in terrestrial DCs. i am not an expert - happy to hear more expert opinions which
118.
by gz5 4y ago
Low-orbit data centers become interesting in this context. Yes, problems with radiation, solar flares and traditional ops. But 'free' power, real estate (1) and cooling. (1) Low orbit real estate may be a future battleground?
119.
by gz5 4y ago
>Four of those companies collectively control more than 83 percent of the freight market. And the vast majority of train stations in the U.S. are served by exactly one railroad. Monopoly behaving like a monopoly. The only real power the
120.
by gz5 4y ago
TL;DR API provider side: the NGINX module opens secure (mTLS, X.509 identity authenticated) connections outbound to a private overlay. API client side: access the overlay over Internet via using the Ziti SDK (agentless approach), or using a

More ›