syscomet
- Karma
- 27
- Created
- September 13, 2012 (14y ago)
- Submissions
- 0
Phil Pennock.
System programmer / SRE / SWEng / security / ISP stuff / cloud stuff / email MTA stuff.
https://bridge.grumpy-troll.org/ for blog.
System programmer / SRE / SWEng / security / ISP stuff / cloud stuff / email MTA stuff.
https://bridge.grumpy-troll.org/ for blog.
Defense in depth. First, the common RPC identity and authorization system provided RPC identity to the GFS API calls, and there was a common user/group system. GFS had ACLs and so despite what was said up-thread most…
There are `-alpine` variants of the golang docker images, so if you're expecting to deploy to scratch or to alpine, the _builder_ step should be using `golang:1.17-alpine` instead.
[nb: I work for the main company behind NATS] Jetstream is GA with the 2.2.0 release. Folks who believe in waiting for "not .0" won't have to wait too much longer.
Brad knows me slightly better than that and there was a bit more factoring into his decision. As I'm one of the maintainers and security/release people for Exim, a major MTA, I'd hope that the SMTP server on my personal…
Those figures are both good and depressing to know, thanks. I figured the PGP usability problems were severe enough that I did not call you out by name in the post. This aspect was merely a darkly amusing aside leading…
It's a special case though. The golang.org/x/ packages are experimental but also candidates for promotion to the standard library. Eg, "context". But this sort of issue is exactly the sort of real-world review and…
blog-post author here, others are addressing the other points, but I wanted to answer Q1: CVEs are for tracking response to issues, so that people can clearly communicate about what they are reacting to. Everyone using…
blog-post author here: all of them written in Golang which use SSH. Packer, Terraform, Vault, all of them. Using a bastion host in your configurations doesn't help if you invoke the tooling on your laptop, since the…
For etcd: https://coreos.com/etcd/docs/0.4.7/etcd-api/ node.modifiedIndex appears sensible for fencing.
In the linked consul documentation, we see a `LockIndex` field in the lock state; https://www.consul.io/docs/agent/http/kv.html confirms that "LockIndex is the number of times this key has successfully been acquired in…