robszumski

13 ms·

91.
by robszumski 4y ago
Dependabot helps when fixes are available and/or if your automation and test coverage is strong. Context from what’s running can help focus your efforts when more investigation is required, if the CVE is tricky or fixes need to be trac
92.
by robszumski 4y ago
Good point, thank you, this should be renamed to plans to match the url at a minimum. I'll make that change now. edit: I've also updated the page with the price. We're starting at $15/server/mo and volume discounts
93.
Launch HN: EdgeBit (YC W23) – live software vulnerability analysis
80 points by robszumski 4y ago|29 comments
94.
by robszumski 4y ago
You can run Vault inside of an enclave to protect it's memory: https://edgebit.io/enclaver/docs/0.x/guide-vault/
95.
by robszumski 4y ago
I think a great middle ground for embracing the cloud but retaining control over your data is the ability to bring your own encryption key. This makes it possible for the SaaS to do the thing that you pay them money to do, but retain contro
96.
by robszumski 4y ago
One cool fact is that prior to running Red Hat, Jim Whitehurst was COO of Delta Airlines. He could absolutely talk the talk on open source software. I always thought that was cool.
97.
Isolate customer GitHub creds to your integration code with a secure enclave(edgebit.io)
1 points by robszumski 4y ago|0 comments
98.
by robszumski 4y ago
Building a tool for running secure enclaves called Enclaver ( https://github.com/edgebitio/enclaver ). There is a big opportunity for keeping data encrypted while running code against it within enclaves. And a more secur
99.
by robszumski 4y ago
It's become so clear that users of a SaaS deserve more control how their data is used and stored. You should absolutely be able to crypto-shred your data from such an important service. This experience sounds awful.
100.
The identity of your code can’t be stolen(edgebit.io)
6 points by robszumski 4y ago|1 comments
101.
by robszumski 4y ago
I love Cloud Run, but can they please tie these two things together for me? It's a radio button that says "On schedule" and an input for the cron syntax.
102.
by robszumski 4y ago
I'm building the "in-use" part of this right now...what if you could encrypt your data with an encryption key (at-rest), but also to a set of code that is allowed to decrypt it (in-use). If that code is identified cryptogra
103.
by robszumski 4y ago
oc and kubectl are interchangable for create/apply/edit/delete type actions. It just also has commands for upgrading the cluster and stuff like that. You can absolutely use kubectl with an OpenShift cluster. (ex Red Hat)
104.
by robszumski 4y ago
I love using just the grid/breakpoint part of Bootstrap and use it as grid.css. No need for complication, no preprocessor needed, etc.
105.
by robszumski 4y ago
An interesting architectural goal: this uses containers both as the source for your app code but also as the output, which is a self-installing container. This means that systems like Kubernetes or anything that runs containers can install
106.
Show HN: Enclaver – create and run secure enclaves(github.com)
3 points by robszumski 4y ago|1 comments
107.
by robszumski 4y ago
I can see the argument for implementing DRM or similar on a personal computer. Do you feel the same outcome applies to a cloud application environment?
108.
The identity of your code can’t be stolen(edgebit.io)
4 points by robszumski 4y ago|7 comments
109.
by robszumski 4y ago
I found the side channel protection and CPU/L1 isolation between customers to be particularly interesting. Very cool to see the physical hardware interconnects for resetting the system. Also the PCI bus as one of the isolating boundari
110.
by robszumski 4y ago
+1 on the update harassment. Are these critical security bugs or random updates!? You never know.
111.
by robszumski 4y ago
Secure enclaves like AWS Nitro Enclaves have some really cool properties that are used here: - memory protection and isolation for Vault while it's running - unsealing without the parent host getting the key (can't be observed) -
112.
Protect Vault unseal keys using Nitro Enclaves and a cryptographic attestation(edgebit.io)
2 points by robszumski 4y ago|1 comments
113.
by robszumski 4y ago
Am I crazy or did they remove 1.15x playback? That one seemed like the right mix of "I don't have 30 minutes" and not skewing the voices too much.
114.
by robszumski 4y ago
Former Red Hatter here. It has also gone the other way, where Red Hat obtained IBM teams that were better suited to live on our side and those products were more successful via integration with other Red Hat products.
115.
by robszumski 4y ago
I saw one of these recently on a tweet about an Amtrak line between LA and San Diego being shutdown. Takeaway: they were giving up on the line. The note on the tweet had the additional context that it was temporary and there was a bus subst
116.
Ask HN: How are you accessing/caching frequently used secrets?
5 points by robszumski 4y ago|1 comments
117.
by robszumski 4y ago
I'm not sure what happened but Dark Sky went from awesome to awful in recent months after the Apple acquisition. Is it just me? Going from "no rain all day" to actively raining with a huge storm 2 hours later. The app does up
118.
by robszumski 4y ago
No screenshot!? C'mon.
119.
by robszumski 4y ago
Do either of you have a shot of what this looks like in practice? Google Images isn't giving me much. Specifically what the Zoom or Meet looks like from your perspective.
120.
by robszumski 4y ago
No mention of Skydio so far...this seems like a big intrusion on their turf, although their drone is much more capable because it's full size.

More ›