joper90

6 ms·

1.
by joper90 4y ago
its AirBnB.. they should have this stuff sorted! Dev/prod should be completely separate with the vaults/secrets management in prod having the correct keys with only a few peeps having access (in a break glass situation). Dev'
2.
by joper90 4y ago
Unless its the CIO/CSO for shite secret management policies.
3.
by joper90 4y ago
Its the process, not the dev. A Dev should never have access to prod secrets, it show flaws in ABnB security model and tells me a fair bit around how the work with dev/deployment.
4.
by joper90 4y ago
High up yes, not the dev who did this.
5.
by joper90 4y ago
No, the process failed. They should NOT have access to prod API keys.. It actually shows how ABnB treats security of prod secrets.
6.
by joper90 4y ago
This to me means the devs have access to the prod keys, even to the external services... not good.
7.
by joper90 5y ago
Nope, even as a coder for 40 years, worked at and ran startups etc, so get the jokes.. it was …. A bit pants.
8.
by joper90 6y ago
That was exactly the same process including devpac (On a cover disk) that I went thru. Flashbacks...
9.
by joper90 8y ago
We use Azure Functions to pull data out of DataDog and other services (bespoke) to chuck in a capacity management database, and then use more FaaS's to munge the numbers etc. We also use it in prod with for events, and customers who su
10.
by joper90 8y ago
Nope, well except the standard Reddit posts that are obviously ads...
11.
by joper90 9y ago
Yes, if you park your car outside your house on the drive, and the key is in the house in a bowl by the door (for example) then they can steal the car in the middle of the night.. This is worse in the UK, as we have much less space, so thin
12.
by joper90 9y ago
Correct, you just have the key (well a card) in your pocket/wallet and walk up to the car, which unlocks, you can then get in and press 'start'.. So if you leave your keys in a bowl by the door, they can just extend the range
13.
by joper90 9y ago
Key\Values in consul. Then pass in an env car with the key.
14.
by joper90 9y ago
Kong is great, really like it
15.
by joper90 9y ago
I assume they mean JWT validation.