robszumski

8 ms·

31.
by robszumski 2y ago
Ah right
32.
by robszumski 2y ago
You have to hold the fund on the ex-dividend date... Pays out once in Dec. If you buy in Feb and sell in Oct, you're not getting your dividend although you earned most of it... If you had VTI, you'd get 3 of them.
33.
by robszumski 2y ago
The zero fund I am familiar with (FZILX) has a once-a-year dividend schedule which I'm sure nets them a lot of money, vs paying out more frequently. If you want to unload, you can only do it once a year without throwing away your earne
34.
Use Code Reachability to Fix Security Issues, Not Vuln Prioritization(edgebit.io)
1 points by robszumski 2y ago|0 comments
35.
by robszumski 2y ago
this is an area that is top of mind for me right now. you don't have to vendor your deps to get a detailed report of what changed, and bonus, how your app calls into it. just wrote about it: https://edgebit.io/blog&#x2F
36.
by robszumski 2y ago
If you're looking to run software in a Nitro Enclave but work with it like a docker container or a Kubernetes pod, check out https://github.com/edgebitio/enclaver
37.
by robszumski 2y ago
I have a post-processed NC file from Fusion 360...which I think is just gcode. How can I transform that into something this can simulate? My hacky attempts have failed.
38.
by robszumski 2y ago
Static analysis paired with AI is the middle ground that makes sense to me (working in a similar security space). But the hard part needs to be regular computer science and the AI comes second.
39.
by robszumski 2y ago
I just picked up 900 lbs of tile and the place would refuse to put anymore in my Subaru Forester. It's a pretty substantial load with big safety ramifications if not stored well.
40.
by robszumski 2y ago
I was on a bike stopped at a stoplight and was rear-ended by a car for this very reason.
41.
by robszumski 2y ago
The broker was advising him on price point, strategy and fielding the interested parties for further discussion. Pretty important for this type of transaction.
42.
by robszumski 2y ago
Please do Xcode next!
43.
by robszumski 2y ago
I love the standalone kubelet/static manifests pattern. It's ideal for edge type stuff and really simple systems. Here's a talk on my CNC control software running in my shop with just the kubelet, no control plane: https:&#x
44.
by robszumski 2y ago
In my experience they haven't been in the past, but LLMs change the game by doing it by default.
45.
by robszumski 2y ago
Yes, it's a very good idea. I don't think it's lost steam, it's just buried underneath other layers of the stack. Red Hat has Fedora CoreOS and RHEL CoreOS variants. Flatcar is going strong with the CoreOS-ethos intact.
46.
by robszumski 2y ago
I just finished reading Nuclear War: A Scenario by Annie Jacobsen – it was great. The book walks through a minute by minute scenario from the second of launch through the satellite detection, alerting of forces, decision making challenges,
47.
by robszumski 3y ago
Ecobee Overview - https://ecobeeoverview.com/ I was diagnosing HVAC issues and was frustrated about the visualization of the data with existing tools. I wanted a single screen with all my thermostats, the mode they are oper
48.
by robszumski 3y ago
One issue with heat pumps is they are more complex in terms of modes they can be in, especially if you have multiple zones. I was troubleshooting an auxiliary heat issue and had to pull from the Ecobee API just to make sense of what was hap
49.
Using a Hardware Root of Trust to Generate Trustworthy SBOMs(edgebit.io)
1 points by robszumski 3y ago|0 comments
50.
Using Linux IMA with eBPF to protect a workload from supply chain risk(edgebit.io)
15 points by robszumski 3y ago|4 comments
51.
Generating SBOMs Remotely with a Hardware Root of Trust(edgebit.io)
2 points by robszumski 3y ago|0 comments
52.
by robszumski 3y ago
I really like oauth2proxy for side projects and internal tools.
53.
by robszumski 3y ago
I attended/presented at this event and loved this keynote. I want to push back on the idea that there is no consensus on what an SBOM is — there are two very popular specs! Yes, quality, content and completeness does vary. And every SB
54.
by robszumski 3y ago
If you're looking for the best way to take a container and run it with Nitro, I work on https://github.com/edgebitio/enclaver Works great with Kubernetes as a DaemonSet or straight on a VM. Like: protection and pr
55.
Breaking down the CVSS v4 spec for scoring vulns(edgebit.io)
1 points by robszumski 3y ago|0 comments
56.
by robszumski 3y ago
DependencyTrack catalogs SBOMs and this is a perfect use case for them. Per parent comment, make sure your SBOM contains transitive dependencies!
57.
by robszumski 3y ago
The video has a lot of glare and the dithering seems like an important part. I wanted to contrast that process with the original.
58.
by robszumski 3y ago
This is great! I would love to see a sample of the color input images and the resulting image on the display.
59.
by robszumski 3y ago
I just wrote a post on this. We have an eBPF + SBOM based security tool and it runs great due to hooking the kernel directly via Kube DaemonSet: https://edgebit.io/blog/base-os-vulnerabilities/ tl;dr: Amazon prior
60.
by robszumski 3y ago
This is why having an accurate scope is key. Easiest way to do that in an hour is to prefer to scan a workload like a container instead of a code repo. Or have a scanner that understands how something is built (and ideally how it runs).

More ›