infamousjoeg

8 ms·

1.
by infamousjoeg 7mo ago
SPIFFE/SPIRE could work for the identity layer. The risk engine concept is cool. Would love to see that applied to machine identities that are working "on-behalf-of" humans.
2.
by infamousjoeg 4y ago
Exactly this. They just need to validate the JWT signature against a JSON Web Key Set (JWKS). There's no need to store the data.
3.
by infamousjoeg 4y ago
Love this minimalist approach!
4.
by infamousjoeg 4y ago
Check out the Secretless Broker at https://secretless.io . It's a cool open source project that allows applications to not need to know secrets which adheres to 12-factor app guidelines.
5.
by infamousjoeg 5y ago
Yes, well, now I'll be slacking off at work due to it... so you'll continue to see that trend. Thanks for this!
6.
by infamousjoeg 5y ago
I developed go-keyconfig after realizing that almost every CLI that I use on a daily basis that requires authentication of some kind drops the secrets in a local filesystem config file in plain-text. As one could imagine, this is ripe for
7.
Show HN: Go-keyconfig – Store config files in OS-provided secret mgmt(github.com)
4 points by infamousjoeg 5y ago|3 comments
8.
by infamousjoeg 5y ago
CyberArk already does this... it's called Vendor Privileged Access.
9.
Microsoft Flight Simulator 2020: Now supports VR headsets(tomsguide.com)
1 points by infamousjoeg 6y ago|0 comments
10.
by infamousjoeg 6y ago
I found this game to only be fun to play in VR (I have the Oculus Quest 2). On PC, it's hard to use KBAM as hands as adamredwoods said.
11.
by infamousjoeg 7y ago
R.I.P. Red Hat
12.
by infamousjoeg 7y ago
This completely fails to mention the security issues with Jenkins, as well. https://www.cyberark.com/threat-research-blog/tripping-the-j...
13.
Dynamic Secrets or Secret Rotation: Which Do You Prefer?(blog.conjur.org)
1 points by infamousjoeg 8y ago|0 comments
14.
by infamousjoeg 8y ago
Which sucks when it's 2am and you start blowing up a majority of shard holders phones to unseal it because it sealed itself causing a critical outage.
15.
by infamousjoeg 8y ago
THIS! EVERYTHING THIS!
16.
by infamousjoeg 8y ago
Sure, the master key is split into shards... I'm talking about the account creating the database user. Let's take MSSQL, for example. The equivalent to a root account there is `sa`. So, Vault will have control of the `sa` accou
17.
by infamousjoeg 8y ago
That was my first thought, too. "But... there's a root account... creating another account... which is typically a privileged action. What's protecting that? Is that root account being rotated, too?"
18.
by infamousjoeg 8y ago
My concern is how you can tell me whether a database user was created by Vault and not by a malicious actor with knowledge of Vault's Dynamic Secrets method mimicking it. How the heck can I know if it was a legit created database user
19.
Automating Cloudflare DNS Updates with AWS Lambda and Python(joeco.de)
3 points by infamousjoeg 8y ago|0 comments
20.
Configuring and Securing Credentials in Jenkins(cyberark.com)
1 points by infamousjoeg 8y ago|0 comments
21.
The Secure Task Runner – Securing Jenkins to Automate Tasks(conjur.org)
6 points by infamousjoeg 9y ago|0 comments
22.
by infamousjoeg 9y ago
You're not the first I've heard going this route... +1
23.
by infamousjoeg 9y ago
I prefer the RBAC and YAML policies Conjur provides... https://github.com/cyberark/conjur
24.
by infamousjoeg 9y ago
I'll be there and looking for it :D
25.
by infamousjoeg 9y ago
How long does the cracking process take? I remember WEP only taking 10 minutes using aircrack-ng in BackTrace... I imagine this takes substantially longer.