raesene9

39 ms·

511.
by raesene9 5y ago
Multi-Tenant Kubernetes is straight up difficult to do well, especially where you're talking hard multi-tenancy for external customers. There was a good report that covered a lot of the risks and mitigations here https://raw
512.
by raesene9 5y ago
Yep I've always had read only root filesystems down as a good control and one that's often not too tough to implement. Another favourite of mine would be using multi-stage builds and minimal base images in production (FROM Scratch
513.
by raesene9 5y ago
Microsoft's guidance (last I looked) was that Windows containers (e.g. the non Hyper-V ones) were not a security boundary, only Hyper-V based Windows containers should be considered to provide isolation. That has the slight clash wit
514.
by raesene9 5y ago
Another Interesting NFT thread from today https://twitter.com/moxie/status/1448066579611234305 .
515.
by raesene9 5y ago
I was careful to say "product claims" and not products. I don't doubt AR is possible, but that the claims Magic Leap made in their early demonstrations were not realistic. I was thinking of the early demonstrations they had,
516.
by raesene9 5y ago
I must admit I'd forgotten about Magic Leap, amazed to see they're still going and raising even more money. In my head, I always put them in a bucket with Theranos and uBeam, Startups who made product claims which experts in their
517.
by raesene9 5y ago
Honestly I doubt that's the reason. A large number of political donors using those loopholes on the other hand...
518.
by raesene9 5y ago
AFAIK Luxembourg and Ireland's focuses are slightly different. They both have very low rates of corporation tax, and that is starting to be addressed by things like the US plan for a minimum tax level. Also they're much smaller co
519.
by raesene9 5y ago
My feeling with those territories is that they should vote to either become proper regions of the UK along with MPs or go fully independent. AFAIK they don't contribute to the UK finances directly, but do take advantage of things lik
520.
by raesene9 5y ago
I'm guessing that the point being made isn't about the financial industry in that sense, which indeed was hung out to dry by brexit, but instead the financial transparency requirements that the EU are bringing in. The UK (along wi
521.
by raesene9 5y ago
Doesn't seem to bad, but I'm running on a desktop with 64GB, so I tend not to notice :) A quick check there shows the vmmem process on my machine is sitting at 1.3GB with one WSL distribution started, which doesn't seem too b
522.
by raesene9 5y ago
Now that WSLg support ( https://github.com/microsoft/wslg ) has landed in a release version of windows, another approach to this is to create new WSL distros for specific tasks, and run browsers from them. Whilst it&#x27
523.
by raesene9 5y ago
I'm interested to see that Keybase is actually still maintained. After the Zoom Acqui-hire, they seemed to have moved on (last entry on their blog https://keybase.io/blog is May 21 2020) but there's activity on th
524.
by raesene9 5y ago
Do you think that most/all people buying NFTs are doing it for the art, or are they doing it because they're speculating that the NFT will go up in value and they can resell it? If you want to appreciate art (of whatever type) wha
525.
by raesene9 5y ago
Shorting Tether would be an amazingly dangerous thing to do, especially on a closely associated exchange like FTX. If Tether goes completely bust, it's likely that closely associated exchanges won't be able to cover the bets. U
526.
Hackers rob thousands of Coinbase customers using MFA flaw(bleepingcomputer.com)
8 points by raesene9 5y ago|0 comments
527.
by raesene9 5y ago
I honestly will not be surprised when this comment gets turned into a start-up that gets funded... either this or the other obvious dystopian application, monitoring employees attention in meetings.
528.
by raesene9 5y ago
Here's my totally outsider informed guesswork. We've seen similar problems recently with Microsoft, where legitimate sounding issues are denied bounties, so this kind of issue is not unique to Apple. My guess would be, that MSRC a
529.
by raesene9 5y ago
There is a slight naming clash though, for some institutions such as Cambridge and Oxford, where Cambridge university (for example) is made up of a number of colleges https://map.cam.ac.uk/colleges/ This is not the sam
530.
by raesene9 5y ago
yeah ideally that should happen :) Just it hasn't so the choice isn't "use locally or send abroad" it's "use locally or let them go to waste" TBF I guess this must be a really complex logistical challenge.
531.
by raesene9 5y ago
I'd agree in the ideal world that's exactly what should happen, however in reality there are a load of unadministered doses in the US ( https://twitter.com/EricTopol/status/1437617018782449668?s=2... ) whi
532.
by raesene9 5y ago
Sure and if we were skipping the analysis here, I'd agree with you. However we have several signals from the researcher side, and no signals (that I've seen) from the vendor side and all of the signals point to a lack of patchin
533.
by raesene9 5y ago
Given that the Azure notification provided zero details on the patching, I think we can apply Occam's razor here quite effectively. One the one hand we have an old version with a known vulnerability that was successfully exploited. On
534.
by raesene9 5y ago
In the article you can see that they actually exploit the old issues, which seems to strongly indicate that this is not a case of back porting.
535.
by raesene9 5y ago
Yep given the number of CVEs in Kubernetes, and to a lesser extent runc, ( https://www.container-security.site/general_information/cont... ) it's pretty surprising to see a major cloud service running versions this
536.
by raesene9 5y ago
Containers solve the problem of clashing library versions needed by different applications running on a single host (and I know there are other ways to solve this). This is really not a new problem :) I remeber dealing with shared libary
537.
by raesene9 5y ago
https://docs.docker.com/compose/cli-command/ ^ There's an rc of a compose command built into the standard docker CLI.
538.
by raesene9 5y ago
yeah I've got a ZV-1 and been looking at the ZV-E10 reviews, it looks nice. the only thing putting me off is that it looks like they move the USB/HDMI ports to the other side from the ZV-1 so, if you flip out the screen, the cab
539.
by raesene9 5y ago
Yep I've got a Sony ZV-1 and it sits on a small tripod behind my monitor just fine.
540.
by raesene9 5y ago
After much searching around for a decent webcam, I went for a Sony ZV-1. Cheaper and smaller than a DSLR setup, has Clean HDMI and good eye autofocus. There's also the new ZV-E10 which adds interchangeable lenses and USB-C but it looks

More ›