yebyen

36 ms·

271.
by yebyen 5y ago
I did a technical review of our Jenkins solution with a friendly neighborhood InfoSec agent once. He was interested in a few things: 1) how is the stored credential being encrypted (is it encrypted at rest), 2) is it real encryption (like,
272.
by yebyen 5y ago
Because you can embed credentials in a Jenkins installation (and when you use Jenkins, we do.) It inevitably gets connected to resources which can cost money, and since it's an internal infrastructure system, it will inevitably be conn
273.
by yebyen 5y ago
Thanks, that was probably my point. Consensus is hard. Ethereum is one of the global systems that currently exists for tackling the consensus problem. Shouting at clouds is on the other hand, not tackling the consensus problem. Someone or s
274.
by yebyen 5y ago
> Spending billions of KWh on blockchains so rich people can speculate on buying their own number (correct me if i'm wrong but to me a NFT is just a number) is just part of this. You say this as if numbers have no utility. Is an IP
275.
by yebyen 5y ago
Our dog had an ingrown corkscrew tail (English Bulldog) which was amputated (laser surgery!) and anyway, I'm telling you this because our groomer does anal expression and said at first, it wasn't working for her because there was
276.
by yebyen 5y ago
That's outstanding. They avoided the loss! If there was ever a better example of cutting the nose in order to spite the face, I never saw it. If we've automated ourselves out of the capability to operate for a few days with paper
277.
by yebyen 5y ago
Yeah yeah, and if you are the one on that phone call at that time, then you are welcome to call the bluff. Gulp Putin already denied responsibility and Biden apparently accepted that, so we wouldn't be attacking the Russian governmen
278.
by yebyen 5y ago
> If a business externalizes the cost, does it matter to them? I mean, yes? Maybe not before next quarter's revenue statement, but eventually it will have to start to matter? If your dog goes and craps in the yard every day, you eve
279.
by yebyen 5y ago
It's easy to say "basically zero chance" when we're armchair quarterbacks and not the ones in the hot seat. I'm inclined to agree that our cyber-security apparatus is not up to the task, but it's also true that
280.
by yebyen 5y ago
They paid $5 million, if "it was cheaper for them," that's solid math that ignores some really important stuff though, LOL. What is the externalized cost of this crisis on the entire country? The $5 million dollar ransom is a
281.
by yebyen 5y ago
I imagine it went something like this "OK, now that you have our attention, and the eyes of the entire international media apparatus are on us, here's how we're going to do this. We're going to send some integer number o
282.
by yebyen 5y ago
When I heard that this pipeline company started advertising a job opening for CyberSecurity Advisor in the last few days, and heard today the ransom of about $5 million was paid, my first reaction was to say "I bet the salary for that
283.
by yebyen 6y ago
https://github.com/cncf/foundation/blob/master/allowed-third... I haven't read the details, or ever seen this policy before (I'm new to both projects) but it was summarized by one of our counte
284.
by yebyen 6y ago
The entire CNCF apparently has a no AGPL policy. We just found out this week that we cannot update and redistribute Grafana anymore with our CNCF projects, (or if we do we will be on very shaky legal footing.)
285.
by yebyen 6y ago
Yes. We confuse blameless postmortem with sweeping things under the rug and helping everyone involved in the mishap to save face at our own peril, they are not the same idea!
286.
by yebyen 6y ago
The triangle says Confidentiality, Availability, Integrity. While your concerns are 100% valid, we need to remember too that setting up access in restricted ways and inviting users to understand the protection and remove the correct barrier
287.
by yebyen 6y ago
They aren't random at all, they are practically in order. It was probably a footnote reference to the bottom of the source article, with a link to each RFC at the footnote.
288.
by yebyen 6y ago
Well, they built Helm which is reasonably successful and carries on their legacy with a large community following. They proved themselves to be among the top experts in the space and got some of the most solid financial backing you can imag
289.
by yebyen 6y ago
Not a problem for me, congratulations on the launch!
290.
by yebyen 6y ago
Deis Workflow is not abandoned! Just changed names, and teams, (but it's still my grandfather's axe!) https://web.teamhephy.com If porter-dev is selling managed hosting platform services, they already have a stronger b
291.
by yebyen 6y ago
Are you aware of Hephy Workflow by any chance? (Neé Deis Workflow) If so, are you aware of the Porter project which is built on CNAB, (by I believe many of the same folks?) https://deislabs.io/ I am with Team Hephy, and for
292.
by yebyen 6y ago
Well the front's not supposed to fall off. The front fell off in this case, but it's very unusual.
293.
by yebyen 6y ago
In fact they even sell insurance for this, and companies that want you to use their software can offer indemnity protection with the same effect. "What if somebody sues me because my use of your software constitutes a violation of thei
294.
by yebyen 6y ago
> This is a very morbid thought, but This is such a well-understood problem in fact that it has a name and Wikipedia entry, called "bus factor". According to: > The "bus factor" is the minimum number of team member
295.
by yebyen 6y ago
To a person who isn't using Erlang or ASP.net, suggesting that we should use either of those language packages and it will solve any of our problems without creating a thousand new ones sounds equally non-starterish to me. To add a cou
296.
by yebyen 6y ago
...but I'm sure the lawyers who brought the case aren't being paid with in-game currency, amiright?
297.
by yebyen 6y ago
Same in Indiana. But the proposed idea was to tax more heavily all unoccupied properties, not merely "all properties other than one's primary residence."
298.
by yebyen 6y ago
How generous of you. Since we were comparing it to something that has only one year of support to come, I thought it was fair to count any more than that as "years" Amazon has a historically good record and reputation for supporti
299.
by yebyen 6y ago
That depends on which news you watch. I'm with you, I don't want to acknowledge that there is any chance. But I've just spent the week with my folks who leave Fox News on in the background for most of the day, and I'd sa
300.
by yebyen 6y ago
Here's another version, that pre-dates the official docs (when they announced that Amazon Linux 2 was now possible to install on your own metal, it wasn't exactly well-documented.) The Amazon docs probably cover the same stuff now

More ›