robszumski

8 ms·

61.
Getting acquainted with BPF as a security tool(edgebit.io)
1 points by robszumski 3y ago|0 comments
62.
Security for Nodes under GKE and EKS: 0 vulns or 70?(edgebit.io)
2 points by robszumski 3y ago|0 comments
63.
by robszumski 3y ago
First, Kubernetes is a resource allocator/scheduler. Find a place for this workload given my constraints. If something goes wrong, find a new place. Second, Kubernetes is a dev-friendly app management tool. Start 5 copies of this app,
64.
Getting acquainted with eBPF as a security tool(edgebit.io)
6 points by robszumski 3y ago|1 comments
65.
by robszumski 3y ago
I've seen a team crawl through a Python 2 -> 3 migration for months, paralyzing product dev. Applying AI to the migration space is really smart.
66.
by robszumski 3y ago
I'll put in a friendly request for a Dockerfile in the repo. I've been trying out AI tools as test cases for our supply chain security platform and had to cobble a Dockerfile together to get this running easily. Really cool tool o
67.
by robszumski 3y ago
The biggest one in here: Strategy Objective 3.3: Shift Liability for Insecure Products and Services A safe harbor provision exists only for companies following secure development practices.
68.
National Cybersecurity Strategy Implementation Plan(whitehouse.gov)
11 points by robszumski 3y ago|1 comments
69.
by robszumski 3y ago
As a founder, some of the federal and state software for registering in various states, workers comp, etc and the estimated tax process as an individual is surprisingly decent. It's not great, but the state and federal level stuff is g
70.
by robszumski 3y ago
The biggest one in here: Strategy Objective 3.3: Shift Liability for Insecure Products and Services A safe harbor provision exists only for companies following secure development practices.
71.
National Cybersecurity Strategy Implementation Plan(whitehouse.gov)
4 points by robszumski 3y ago|1 comments
72.
by robszumski 3y ago
I just stumbled across multipass 2 days ago and it's been great for our local dev environment with a script to manipulate a bunch of things with multipass exec. I just wish multiarch containers weren't such a pain to deal with.
73.
by robszumski 3y ago
Sounds like you're looking for the CoreOS Linux successor FlatCar https://www.flatcar.org/ It's actually based on some ChromeOS update tools under the hood but is a regular Linux distro, just super minimal and des
74.
by robszumski 3y ago
> Also package dependency info is mostly lost in the container but would be valuable to have in the SBOM. Agreed on connecting code->container and I'd go one step further with code->container->running server. I've help
75.
by robszumski 3y ago
As a fan of Syft, which parts are roughest for you? Agree that there is work to be done.
76.
by robszumski 3y ago
Red Hat is also making a move here, not at the UI layer but supporting RHEL in an automotive environment. It could be interesting to make these systems accessible to more software developers and appear a bit closer to cloud/web service
77.
by robszumski 3y ago
RIC is getting more direct flights as volume picks up. Breeze flies to SFO direct, but its not super regular and apparently they cancel them last minute (yikes!).
78.
by robszumski 3y ago
This incident and the Colonial Pipeline attack were the main drivers behind the Biden cybersecurity executive order "Executive Order on Improving the Nation’s Cybersecurity" [1] which has driven changes to policy at NIST, FDA, OMB
79.
by robszumski 3y ago
To me this is always a really interesting line of thinking. We customize the heck out of our phones but the car is off limits!? I want my doors to lock every night at 10pm in case I forget. I want to bring up my favorite temperature and fan
80.
by robszumski 4y ago
Tony Bruno of ULA wrote a nice blog related to this recently. Most launchers are optimized for either LEO or the high energy orbits/interplanetary and are not really well suited to the opposite mission. See Figure 1 for a nice graphic.
81.
GitHub adds support for generating SBOMs from dependency graph(github.blog)
1 points by robszumski 4y ago|0 comments
82.
by robszumski 4y ago
This was the proposed PR that is summarized in that article: https://github.com/moby/moby/pull/10411 if you did `docker tag supersecret/app:latest && docker push` instead of `docker tag registry.
83.
by robszumski 4y ago
This was the initial pebble that lead to Podman existing via Red Hat. No Red Hat customer wanted to pull or push to DockerHub by default due to a typo. No PRs would be accepted to change it and after dealing with customer frustration over a
84.
by robszumski 4y ago
Are there any hardware acceleration strategies for FHE or is it all making the calculations more efficient on the software side right now? My guess is that the software needs to mature before baking silicon?
85.
by robszumski 4y ago
Inside of the SBOMs, we can detect a lot: https://github.com/anchore/syft#supported-ecosystems You're right that the active/dormant detection needs to be customized per type of runtime. It ends up being a mix
86.
by robszumski 4y ago
I assume the dev number is higher because the version bump is mixed in with other changes and discovering the CVE in the new version means investigating compatibility with the feature work you just did. Agree that you have to be skeptical a
87.
by robszumski 4y ago
I'm curious to hear what tools folks are using for generating software bill of materials (SBOMs) today? We're huge fans of the Syft project: https://github.com/anchore/syft You can read more about our "r
88.
by robszumski 4y ago
Heh whoops, thank you :)
89.
by robszumski 4y ago
There's this stat that it takes 21 mins to detect, prioritize and remediate a single vuln in production. And that goes up to 51 mins for things found in dev. Obviously automation drives this down very low and manual investigation drive
90.
by robszumski 4y ago
The only third party JS we use outside of Google/Youtube is a single marketing analytics tool. I haven't seen a report of this before but I don't like it at all – consider that tool in the trash. edit: it's gone

More ›