syscomet

3 ms·

1.
by syscomet 4y ago
Defense in depth. First, the common RPC identity and authorization system provided RPC identity to the GFS API calls, and there was a common user/group system. GFS had ACLs and so despite what was said up-thread most people could _no
2.
by syscomet 5y ago
There are `-alpine` variants of the golang docker images, so if you're expecting to deploy to scratch or to alpine, the _builder_ step should be using `golang:1.17-alpine` instead.
3.
by syscomet 6y ago
[nb: I work for the main company behind NATS] Jetstream is GA with the 2.2.0 release. Folks who believe in waiting for "not .0" won't have to wait too much longer.
4.
by syscomet 9y ago
Brad knows me slightly better than that and there was a bit more factoring into his decision. As I'm one of the maintainers and security/release people for Exim, a major MTA, I'd hope that the SMTP server on my personal doma
5.
by syscomet 9y ago
Those figures are both good and depressing to know, thanks. I figured the PGP usability problems were severe enough that I did not call you out by name in the post. This aspect was merely a darkly amusing aside leading into the main point
6.
by syscomet 9y ago
It's a special case though. The golang.org/x/ packages are experimental but also candidates for promotion to the standard library. Eg, "context". But this sort of issue is exactly the sort of real-world review and
7.
by syscomet 9y ago
blog-post author here, others are addressing the other points, but I wanted to answer Q1: CVEs are for tracking response to issues, so that people can clearly communicate about what they are reacting to. Everyone using the library needs to
8.
by syscomet 9y ago
blog-post author here: all of them written in Golang which use SSH. Packer, Terraform, Vault, all of them. Using a bastion host in your configurations doesn't help if you invoke the tooling on your laptop, since the connection to the b
9.
by syscomet 11y ago
For etcd: https://coreos.com/etcd/docs/0.4.7/etcd-api/ node.modifiedIndex appears sensible for fencing.
10.
by syscomet 11y ago
In the linked consul documentation, we see a `LockIndex` field in the lock state; https://www.consul.io/docs/agent/http/kv.html confirms that "LockIndex is the number of times this key has successfully b