gz5

18 ms·

181.
by gz5 4y ago
I am not the OP but we run SaaS on top of the OpenZiti platform - happy to discuss using the open source to securely deliver SaltStack or other apps.
182.
by gz5 4y ago
So...for ops teams, remove VPNs, bastions, open IB FW ports, complex ACLs. One inbound firewall rule: deny-all. Abstracted...Paramiko / Ansible solution shows developers how to embed secure networking into our apps, as code, via OpenZ
183.
by gz5 4y ago
very cool project. is it straight DNS (with very short TTL and the preference based on energy), or is it something like anycast (with preference based on energy rather than latency?
184.
by gz5 4y ago
striking data. thoughts on the basket of public sector causes? + people leaving for greener pastures? + govt belt tightening...trying to operate with lesser staff. + (lack of) speed to rehire for positions cut during the height of c-19? +
185.
America's New Labor Market(axios.com)
2 points by gz5 4y ago|1 comments
186.
by gz5 4y ago
Agree on the macro. Why the need to crush demand now, and what steps by what actors are you identifying as designed to crush demand?
187.
by gz5 4y ago
I should have worded that better - was trying to think of startups (or companies with startup characteristics (like the high losses and increasing costs coinbase had last q)) coming back after a very large reset.
188.
by gz5 4y ago
The advice in these types of economic times from VCs etc. is to get to default-alive, e.g. a viable shot at cash flow positive before the money you have in the bank is gone. While that view is understandable, can folks think of companies wh
189.
by gz5 4y ago
OP here. Goal is clear identification of matches between use case and solution. Pls do comment if you can help improve the use case compare or the more specific linked benchmarking and feature docs, and we will incorporate the feedback. Wo
190.
Comparing networking alternatives: Tailscale and NetFoundry(netfoundry.io)
13 points by gz5 4y ago|2 comments
191.
How did the IR community get Russia/Ukraine so wrong?(marginalrevolution.com)
3 points by gz5 4y ago|2 comments
192.
by gz5 4y ago
fully self-hosted is usually best, e.g.wireguard. zerotier is close. openziti, especially in cases in which app-specific VPNs help (each session looks like different encrypted apps, and you choose what apps).
193.
by gz5 4y ago
another well vetted one is OpenZiti (NetFoundry SaaS products are built on top of OpenZiti). full mesh, although default-closed model instead of default-open model: https://openziti.github.io/ziti/overview.html
194.
by gz5 4y ago
can be difficult but one key is the openziti tunneler is the opposite of a traditional vpn client - it only intercepts apps by policy, e.g. it would protect the Jenkins traffic, but ignore whatever else the contractor is doing (assuming t
195.
by gz5 4y ago
Looks nice. The key difference seems to be the OpenZiti solution enables you to manage by identities (instead of IP addresses), and close all the inbound firewall ports? However, believe the two solutions would work together?
196.
by gz5 4y ago
The gains are there but are mainly realized by the winning companies - I don't think they could have scaled like this otherwise? + Microsoft went from about $25B in annual revenue to ~200B in the past 20 years. + Apples currently holds
197.
The Way: Invisible Jenkins(netfoundry.io)
1 points by gz5 4y ago|0 comments
198.
by gz5 4y ago
history doesn't repeat but it often rhymes is a useful base construct, how much do the macro differences between the 80s example cited in the post and today change the model? we know the world is now much more interdependent, interconn
199.
by gz5 4y ago
I should have provided more detail. I am thinking about basic home users - who often rely on their default modem/router setup from their provider - let's say inbound 443 is open, at the very least (statically or can be opened dyn
200.
by gz5 4y ago
the benefits to management, automation and ubiquitous connectivity are well covered. with that, we get a different security paradigm. let's say i have basic needs - some IPv6 IoT devices on my home network, with a req for SSH and RDP
201.
by gz5 4y ago
Also an opportunity: 1. Good people will be more available (there will be public company cuts and private cuts, as well as resignations, especially people working for companies in the Series B to Series D range (who raised those rounds at t
202.
by gz5 4y ago
3 part series: Part 1 - background Part 2 - get your hands dirty Part 3 - use the resultant Prometheus solution
203.
(Prometheus) Scraping Anything, Anywhere (Part 3)(openziti.github.io)
7 points by gz5 4y ago|2 comments
204.
CRISPR Now Possible in Cockroaches(phys.org)
1 points by gz5 4y ago|0 comments
205.
by gz5 4y ago
Nice solution. You can got a step further if you have the need - your eavesdropper or malicious observer problem can be addressed by launching the network connections from inside the process space of your app, e.g. for golang: https:&#x2F
206.
by gz5 5y ago
I like that Suricata is open source but haven't used it. You can close all your inbound ports and link listeners, e.g. locally resolved DNS and outbound-only https, only for authorized sessions.
207.
by gz5 5y ago
Add network isolation to your defense in depth strategy. Close all link listeners and inbound firewall ports. Open authorized-only, outbound-only, ephemeral sessions.
208.
Twitter Adopts Poison Pill to Ward Off Musk Takeover(bloomberg.com)
5 points by gz5 5y ago|3 comments
209.
by gz5 5y ago
Great list from Cowen (very jealous of how much he reads). I added Stormlight Archive by Brandon Sanderson.
210.
The Best Fiction in Modern Times(marginalrevolution.com)
1 points by gz5 5y ago|1 comments

More ›