raesene9

82 ms·

811.
by raesene9 7y ago
Why is it a sham? TPPs (who are either AISPs and/or PISPs) process banking information for customers of participating banks. A TPP will typically provide some kind of service like a unified view of customer finances, and as part of th
812.
by raesene9 7y ago
https://www.bleepingcomputer.com/news/security/sodinokibi-ra... has information about this being specific ransomware. One possible vector for the attack, from that article, is that apparently they had an unsecured
813.
On Linux's Random Number Generation(research.nccgroup.com)
176 points by raesene9 7y ago|83 comments
814.
by raesene9 7y ago
I'm remote in the UK. For some years I went to the office once a year, all my other work (apart from conferences, which I would still have done if I was office based) has been remote. All depends on the type of work, the team setup and
815.
by raesene9 7y ago
My use case for having a Linkedin account is generally keeping track of where people I've worked with in the past are now, and checking out companies/people before I speak to them about something. TBH I get the recruiter spam that
816.
by raesene9 7y ago
In the first case you still have a contract, and therefore contact law in your country applies. Blatent breach like "they wrote code that stole all our SSH private keys and then they deployed cryptocoin mining software to our systems&
817.
by raesene9 7y ago
The point I was flagging up was the dissonance of corporate hiring policies relative to their use of third party code. For hiring, no chance you'd get that policy past corporate HR in any large company. Try hiring a developer sight un
818.
by raesene9 7y ago
My favourite comparison for all the 3rd party library use is, if you walked in to the CEO of your company and said "we want to hire some people with no background checks, no interviews and no idea where they live to write code for our
819.
by raesene9 7y ago
My guess would be "Chief Product Officer"
820.
by raesene9 7y ago
I'd say that from the article SoftBank are operating in grey area of accounting regulation. Combine that with the fact that those auditing/consulting firms are being paid by SoftBank and you can see a strong incentive for them to
821.
by raesene9 7y ago
yeah I think this approach will have fewer limitations than kind, and also it's fun to try different approaches! BTW I think your ansible book is great, really helped me get to grips with it.
822.
by raesene9 7y ago
k3s is usually (AFAIK) run on VMs for production purposes, rather than being used for testing, which is where kind shines. The major advantage of kind is you download a single binary, run one command and quickly have a functional, disposabl
823.
by raesene9 7y ago
A good method for learning how clusters work and playing with them without having to spend a lot of time re-building when you break things is kind ( https://kind.sigs.k8s.io/ ). Each node is a Docker container, but the versio
824.
by raesene9 7y ago
So it does provide practical protection to use NAT in that you've reduced the set of valid attackers from "anyone on the Internet" to "people with the ability to affect the upstream router in my ISP" That (for most
825.
by raesene9 7y ago
From what I see in general MS like Linux on the server, not so much the desktop. The reason for that is pretty obvious. They want as many organizations as possible to use their cloud platform, for that to work, they need first class Linux
826.
by raesene9 7y ago
There is an easy counter argument which is the post you were replying to talked about the impact Docker had had, it made no arguments about Docker's technical merit. You replied by talking about your perceptions of Docker having a bad
827.
by raesene9 7y ago
you're kidding right? Docker runs as the Container Runtime under most Kubernetes clusters (in fact every Kubernetes cluster I've seen). The only other CRIs that are commonly used are CRI-O and ContainerD (which Docker already use
828.
by raesene9 7y ago
yeah I know Hub has some revenue stream, but I'd be fairly surprised if it even covers the cloud bill they must get from all the free repo's. From my experience most companies using private repos use their cloud provider's on
829.
by raesene9 7y ago
I took that line to be sarcasm.
830.
by raesene9 7y ago
This seems like a bit of an unusual move at first glance, hopefully more details will come out about Docker's plans. From this article it sounds like Docker are keeping Desktop and Docker hub, neither of which make a lot of money (I&#x
831.
by raesene9 7y ago
From what little I've looked at podman, the "no daemon, rootless" story isn't quite as straightforward as it might appear. For starters, you couldn't expose ports as a standard user running podman last time I used i
832.
by raesene9 7y ago
Out of curiousity, have you seen anywhere using CRI-O/podman in production in place of Docker anywhere?
833.
by raesene9 7y ago
it fixes about 2:30-3:00 in.
834.
by raesene9 7y ago
If getting a better understanding of exactly how Kubernetes network is of interest, I'd also recommend this episode of TGIK https://www.youtube.com/watch?v=IhbJ3ll4usI In general actually, I've found TGIK really u
835.
by raesene9 7y ago
mods are volunteers, who provide their time for free to improve the site, I'm not aware of any mods that are paid.
836.
A large number of Stack Exchange mods resigning over new policies(meta.stackexchange.com)
338 points by raesene9 7y ago|313 comments
837.
by raesene9 7y ago
The challenge with Kubernetes is the number of layers that are being created. Whilst each individual layer can be understood, it takes time. Additionally, these layers are prone to rapid change. To take one example Cilium and other play
838.
by raesene9 7y ago
AFAICR for the UK anyway Lloyds is not a straight username/password is it? Also with PSD2 coming along they'll be doing MFA now, I'd guess.
839.
by raesene9 7y ago
On the attacker's extra tries. that's assuming a straight username/password combo with no additional data. For UK banks at least, I can't think of a single one that's only username/password. The better ones ar
840.
by raesene9 7y ago
Security is not binary. It's possible to do a good job on preventative measures, and implement detective and reactive controls to help if/when a breach occurs. It's just expensive, so companies who haven't been breach

More ›