gz5

12 ms·

121.
Nginx Zero Trust Security(openziti.io)
3 points by gz5 4y ago|1 comments
122.
by gz5 4y ago
>It’s inconvenient. You can’t get started in ten seconds. This leads to less initial stickiness. It means that the people who get through the learning curve are more likely to be committed and perhaps generous. It is an interesting point
123.
Some Thoughts on Mastodon(seths.blog)
9 points by gz5 4y ago|4 comments
124.
by gz5 4y ago
Putting aside how this was handled, Elon is looking at a business which is losing money and doesn't have a clear path to make money, and acting accordingly. His priority is not to preserve the business - the business is broken as defin
125.
by gz5 4y ago
I feel like the radio experience is a 'you'll only know it when you see (hear) it' type thing. A great radio team makes a huge difference. Was lucky enough to grow up with the Mets announcers of the 80s (Bob Murphy, Gary Coh
126.
by gz5 4y ago
As a layman, it feels like studies which are not specific to individual genomes (and expressions of those genomes), and don't usually consider differences in areas we seem to be learning more about every hour (e.g. gut biome), are goin
127.
by gz5 4y ago
Long but appreciate why it is long. Thanks for taking the time. >We strongly recommend, for you adults who'd like to teach kids how to play any tabletop baseball game, you first take them to see an actual ballgame...or at least wat
128.
by gz5 4y ago
>Maybe you need to receive a webhook from GitHub There are also free options, e.g. ngrok [0] And open source options, e.g. openziti [1] Doing webhooks and dark webhooks for quite some time. Always good to have more options - what does F
129.
by gz5 4y ago
>Satellites move rapidly, have low bandwidth, and are located thousands of miles away from Earth, so it can take a few minutes for even short messages to get through. Low orbit satellites can be about 500 kilometers / 300 miles so w
130.
by gz5 4y ago
Corporate-speak aside, Meta and Stripe couldn't be more different: + Meta is funding a new business. Stripe is funding expansion of current business. + On existing revenue, Meta has new threats which had little to do with C19 (Apple&#x
131.
by gz5 4y ago
Seems more like a classic run on the bank. Made worse because: + the bank (FTX) was likely massively over leveraged + the bank's primary assets were likely not very liquid Both of above are speculation. However, why else be forced to
132.
Get Ready to Relearn How to Use the Internet (Tyler Cowan)(washingtonpost.com)
2 points by gz5 4y ago|0 comments
133.
by gz5 4y ago
Even if you get PMF, you don't magically sustain it and extend it. You need PMF and the business model*. Example: Yahoo search had PMF. Google search had PMF paired with the winning business model. *and much more, depending on your ad
134.
by gz5 4y ago
it is a good description. the issue is our code has lots of these types of patterns. look at sql injections alone. certainly it is our job to tighten up our software - but we are very vulnerable with the current model of the 'authenti
135.
by gz5 4y ago
>The underlying problem of Log4Shell is input sanitization While we can point to Log4j’s “message substitution” feature, there are infinite similar "features" in (whatever software) which can be exploited IF there is public n
136.
by gz5 4y ago
There can be 100% user-facing feature parity with differences on: + SLA and support models (including updates, delivery, integration, etc) + Hosted vs. self-hosted + Procurement models + Compliance models + Legal, licensing, IP models The l
137.
Liz Truss resigns as UK prime minister(theguardian.com)
7 points by gz5 4y ago|3 comments
138.
by gz5 4y ago
lock in mentality. free data in but high charges out. although azure <-> oracle cloud have gone to zero rated egress for one use case . will be interesting to see if it extends to other use cases and/or clouds. https:/&
139.
by gz5 4y ago
High variance in groups with different cultural norms. And, even within those groups, there is variance based on the level of trust within the group and the context of the conversation. Example: I like observing negotiation-heavy (implici
140.
by gz5 4y ago
Nice work. Depending on your secure networking goals, you could evaluate using the OpenZiti Golang SDK to embed zero trust networking in Mutagen as an alternative to VPNs.
141.
Set Up a Secure Multiplayer Minecraft Server(openziti.io)
1 points by gz5 4y ago|0 comments
142.
by gz5 4y ago
> Reverse Port Forwards (forget ngrok. This is free & better). i assume this means the 'disposable root server' can send [whatever] encrypted data over the ssh tunnel to my machine (and my network if the machine is not prop
143.
by gz5 4y ago
idea generation being measured as an output of 2 strangers brainstorming on a random product seems too distant from the scenario in which most creative ideas are actually created. my experience in real-world enviros: + no single variable is
144.
by gz5 4y ago
meaning lots of ACLs on both sides of the api server, or meaning lots of better (simpler, more secure) ways to do it?
145.
by gz5 4y ago
Well done. From the control plane section: >The Kubernetes API server runs on port 6443, which should be protected by a firewall to accept only expected traffic. How are folks doing this in practice at scale? Managing ACLs for kubectl,
146.
by gz5 4y ago
Definitely not paranoid. This is the time to get ahead of this. For distributed energy scenarios in which various sites operated by different administrators (my_neighborhood_solar, big utility, your_personal_site) may exchange energy, then
147.
by gz5 4y ago
I haven't and don't believe this is systemic. You may have been brute forced?
148.
by gz5 4y ago
Looks good, Matt, and thanks for open source and SaaS flexibility. Can you add to or correct the comparisons to OpenZiti and Wireguard to help us frame the sweet spot for Ockam? OpenZiti In common: mTLS w/ built in PKI mgmt; attribute
149.
by gz5 4y ago
This ^. Alternative is to put authorization into the app w/ a resultant VPN-like encrypted connection through mTLS verified overlay network which has no access to your data plane keys. So no MNO access and E2E encrypted session from t
150.
by gz5 4y ago
responses* to all the great discussion: 1. the problem solved by the openziti platform is making secure networking simpler and stronger for dev, ops and sec teams. 2. to solve this problem, openziti provides functions such as mtls; strong I

More ›