raesene9

86 ms·

961.
by raesene9 8y ago
That's a view for sure, and as a company I'm not sure what Docker's endgame is now. However, I think it's premature to write off Docker the technology. There's a load of scripts/tooling/mindshare baked in
962.
by raesene9 8y ago
Docker on Windows is interesting. For windows containers, it can do both process based isolation (similar to Docker on Linux) and Hyper-V based isolation, which uses a very cut down VM as a base. Compared to Linux containers the base images
963.
by raesene9 8y ago
To be fair, the article is about both. To quote "in my humble opinion the days for Docker as a company are numbered and maybe also a technology as well."
964.
by raesene9 8y ago
Well Linux had containerization before Docker came along. The initial release of LXC was in 2008, a decent distance after Jails/Zones but still 5 years before Docker. OpenVZ was even earlier than that, starting in 2005
965.
by raesene9 8y ago
Three Words . "Ease Of Use" Containerization has obviously been around for ages before Docker came on the scene, yet it's adoption has dwarfed that of other similar solutions, why is that? People have to start with a technolo
966.
by raesene9 8y ago
On your dev computer though you might want to .. build containers to confirm that your build steps all work ok, so Podman + buildah, then you might want to ... push them to a repository to collaborate with a colleague without setting up CI&
967.
by raesene9 8y ago
Docker the technology isn't obsolete now and I very much doubt it will be in the future. As you've noticed there's a load of solutions who make use of Dockerfile formats and store images on Docker hub. I'd expect that th
968.
by raesene9 8y ago
for me the problem of the RH container landscape is that it's way more complex for new users than Docker. In docker-land, `apt install docker.io` gets you a working container system with image management, network management and contain
969.
by raesene9 8y ago
Well Docker the company is a different game. They have gone quite heavily for the enterprise market and support Kubernetes as part of their Docker EE product. Of course, whether that will give them enough success to justify their valuation
970.
by raesene9 8y ago
It's fair to say that in the hype cycle Docker (the technology) has passed its peak, but I don't think the conclusion that as a technology, it's finished, is warranted. Containerization is still on the rise and Docker is part
971.
by raesene9 8y ago
Fame doesn't equal trust, but if someone with no public background starts claiming to have been in the NSA/MI6/FSB/whatever, why would you believe them?
972.
by raesene9 8y ago
No it won't, that's a really odd take. Perhaps if you want a job in very specific sub-section of cyber-espionage stuff, you might have a problem with existing on social media (although I doubt it) But the idea that general IT s
973.
by raesene9 8y ago
Yeah PHP has been a rich source of SQLi issues in the past, but it can crop up anywhere. I've seen it most languages/database engines and even where an ORM is in play (e.g. ActiveRecord in rails) you can get it with bugs in the OR
974.
by raesene9 8y ago
You can see SQLi in pretty much every system that supports SQL (even including MS Access!), although the impact tends to be worse where the Database engine has more functionality for things like running operating system commands, where it c
975.
by raesene9 8y ago
that would be cool, but yeah a bit pricey.
976.
by raesene9 8y ago
For anyone interested in the history of SQL Injection, the generally accepted first article talking about it was in 1998 from rain.forest.puppy http://phrack.org/issues/54/8.html#article It's interesting that
977.
by raesene9 8y ago
yeah there's some options for home built I think, I was kind of hoping for an off the shelf system ideally. It kind of surprises me that there isn't one, you'd think the "wander round my house, keeping an eye out for ki
978.
by raesene9 8y ago
They do have radio collars, but those only have a range of 1/4 mile or so. There are GPS equivalents but the battery life/size has never been ideal.
979.
by raesene9 8y ago
yeah I was hoping for something about 1-2ft tall ideally with an adjustable camera. Still wouldn't spot all the places but could be useful.
980.
by raesene9 8y ago
cool site. In this line, one thing I've been looking for, but unable to find a good option for, is a robot which you can control over a wi-fi network which has a camera on it and it can roll round your house. So my use case is to check
981.
by raesene9 8y ago
Worth noting that you can buy Windows ARM laptops now, and that there are ARM apps available for them. https://www.neowin.net/news/lenovo-yoga-c630-review-windows-...
982.
by raesene9 8y ago
Also Kubeadm has a pretty sane set of default security settings, which some other k8s distributions do not. Specifically kops (by default) does not enable authentication on the kubelet, meaning any attacker who gets access to one container
983.
by raesene9 8y ago
The software industry has been a thing for over 60 years now, with the first commercial software company being founded in 1955 ( https://en.wikipedia.org/wiki/Software_industry#History ). The first commercial aviation co
984.
by raesene9 8y ago
and it seems like that the UK will lose it's connection to this no roaming cost club, post brexit :(
985.
by raesene9 8y ago
I'd agree automatic guessing is dangerous, but an explicit (default off) option to allow upload in other countries doesn't seem like a risk. You could even put some wording round "hey this will cost you data" and offer a
986.
by raesene9 8y ago
So as a Blue teamer your perspective makes sense, as presumably you only work in organizations who can afford dedicated blue teams :) Where I think most of the re/mis-use of red team tools would be effective is in the many organization
987.
by raesene9 8y ago
"Dropping 0-day" usually refers to the act of releasing an exploit for a previously unknown security vulnerability, prior to the product owner being able to deliver a patch for it.
988.
by raesene9 8y ago
yeah it's a tricky question, I mean Red Teams can never fully emulate all classes of attacker as they're still constrained by laws, but more realistic red teams provide more realistic tests :) What seems to be the case is that low
989.
by raesene9 8y ago
It's interesting to see the development of Red team tooling over the last couple of years. It's obviously necessary for red teamers to continue to advance to be able to cope with improving Blue team technology. However Red Team te
990.
by raesene9 8y ago
It's worth noting that on security.stackexchange.com , The Bear and his alter ego are no.1 and 2 by reputation, respectively.

More ›