raesene6

12 ms·

91.
by raesene6 9y ago
As soundcloud are a UK registered company you can actually see all their accounts/filings here https://beta.companieshouse.gov.uk/company/06343600/filing-h... looking at their accounts to Dec 2015 (latest ava
92.
by raesene6 9y ago
I do the same thing. I wouldn't do it in early interactions with someone or with customers, but with colleagues and friends in conversations I often think that terse factual statements can be mis-interpreted, and I'd rather be tho
93.
by raesene6 9y ago
In the UK OSCP can be used for CRT equivalency and I know that many/most pentesting companies care about CRT/CCT qualifications in the UK, if only because they're a requirement for doing work for some government departments,
94.
by raesene6 9y ago
Average or Median, it makes a big difference. US Average wealth is $300,000, Median Wealth is $44,000 (source http://money.cnn.com/2014/06/11/news/economy/middle-class-we... ) The US is skewed very h
95.
by raesene6 9y ago
To me, far more likely is that locally grown food would be displaced by food grown in lower cost countries. That already happens to quite a degree in the UK, but it's mainly to make things available "out of season" from what
96.
by raesene6 9y ago
thanks for that. I was perhaps more thinking of areas around how you configure kubernetes. for example, do you use RBAC, do you configure kubelet authentication/authorization, what certificates are used by the API server for etcd aut
97.
by raesene6 9y ago
From what I've seen of both, Docker swarm mode is smaller in scope and simpler than Kubernetes. I think some setups will suite swarm better, whilst others will benefit from the richness of what k8s provides.
98.
by raesene6 9y ago
As someone who does conference talks, I'm glad they're recorded. It acts as a useful piece of advertising/credentialising and is also useful for future conference organizers to check to see if they think the way I present wi
99.
by raesene6 9y ago
I've done a reasonable number of talks for conferences/seminars. The only times I got paid in the past was when I was approached by specific companies to do a talk for them. Sometimes you'll get travel covered and generally
100.
by raesene6 9y ago
Ahh I see, interesting theory, but I guess I'd want to see some drop tests of the full phone before I was convinced to have a phone with no case.
101.
by raesene6 9y ago
It'd be good to see that, but to me I'd want to see drop tests on the full phone to have some comfort that I wouldn't need a case...
102.
by raesene6 9y ago
Not sure we're differing that much. My point was that the titanium shell they're providing doesn't (to me) remove the need for a case as they're saying it does. Any drop which damages the glass of a phone is a problem.
103.
by raesene6 9y ago
I like the idea of tougher phones, but to me it misses the mark to talk about the titanium phone case surviving corner drop tests, it's the glass that's the problem. The number of people I've seen wandering around with cracke
104.
by raesene6 9y ago
Looks like a nice incremental improvement to the Surface Pro line. The "no fan" option on the Core i5 could be quite nice, one of the annoyances about the Surface Pro 3 that I've seen was the noise of the fans.
105.
by raesene6 9y ago
I'm very glad to see this advice for the NCSC, they have been taking a good practical stance on many security issues and helping to provide weight to more pragmatic approaches. I've never actually managed to find out where the ide
106.
by raesene6 9y ago
painful maintenance - most users don't want to manage certificates and crypto keys especially in a multi-device world. that's likely the main one If you don't use a hardware module certificates are easily stolen by malware an
107.
by raesene6 9y ago
The idea of passwords being something you remembered, died out when we started to see a proliferation of systems needing passwords for authentication. Humans (in general there are some exceptions) aren't very good at remembering large
108.
by raesene6 9y ago
The more general problem with serverless architectures that this post illustrates is that you're essentially running on a series of FAAS/SAAS style services which can change their billing at any time. So you either have to code a
109.
CIS Security Standard for Kubernetes 1.6 Released(nccgroup.trust)
2 points by raesene6 9y ago|0 comments
110.
by raesene6 9y ago
One of the big problems here will be for any country which makes a lot of use of older computers using Windows XP as there is no patch for this vulnerability on that OS version. How many systems that is, is debatable but by at least one ben
111.
by raesene6 9y ago
If someone connects to a network which has been infected and they've not applied the appropriate patch (MS17-010) it looks like they're in trouble if they're running Windows and don't have a firewall blocking incoming co
112.
by raesene6 9y ago
The issue being exploited in the ransomware attack was patched months ago (MS17-010). The reason that it's successful is a) people don't apply patches quickly b) people us unsupported versions of the operating system and c) the NS
113.
by raesene6 9y ago
Docker on windows seems to be a little bit complex. There's Docker for windows which allows for linux docker containers to be run on windows, using Hyper-V. Then there's Windows Container Services which allows for Windows Docker c
114.
by raesene6 9y ago
That's a very interesting question. The answer is that it depends on the K8s distribution in question. One of the challenges of K8s security is that there are a wide variety of distributions, each with their own defaults and configura
115.
by raesene6 9y ago
no worries, I've got some more info. on that on my blog https://raesene.github.io/blog/2017/05/01/Kubernetes-Securit... which may be of use.
116.
by raesene6 9y ago
This guide makes an interesting choice with regards to etcd security, which I'm not sure I'd go with. etcd stores a load of sensitive cluster information, so unauthorised access to it is a bad thing. There's an assumption in
117.
by raesene6 9y ago
hmm, one of quite a few slack-a-likes out there. One thing I wasn't too fond of in this case is that the Download: Source-code link on that page which has a github logo on it, doesn't actually go to a github page if you click it,
118.
by raesene6 9y ago
Indeed, part of that will be the culture of the company. I've seen quite a few companies where any breach of security is held to be the "security team's fault", so they have an incentive not to accept risks (limited upsi
119.
by raesene6 9y ago
Unfortunately Security and compliance (like PCI) cover similar ground but are very different in implementation. PCI auditors work to a fixed standard and can be negatively affected if its found that they deviated from it, so there's a
120.
by raesene6 9y ago
I said no serious financial hit, not no hit. Serious in terms of "the stock price went down significantly", there's still costs of breach clean up etc. Also there's a big negative externality in that a lot of the cos

More ›