mac-chaffee

9 ms·

1.
by mac-chaffee 3mo ago
That's really cool! I actually did download an archive of aol-sucks while researching this, but the software I was using to look through the mbox file was kinda buggy so I gave up. I'm literally the meme of the miner guy giving up
2.
by mac-chaffee 1y ago
I'd generally confirm that suspicion: https://www.macchaffee.com/blog/2023/wafs/ WAFs have a few valid uses in my opinion: "virtual patching" and the ability to create custom rules such as bloc
3.
by mac-chaffee 1y ago
I agree but there's a lot of nuance to the next question of "well what IS bad for the environment" and tech's role in that question. I've been unsatisfied with how people in tech address that complex subject so I wr
4.
by mac-chaffee 2y ago
I wrote up a bit of background on non-competes in mid-2024, I see my fears came true: https://www.macchaffee.com/blog/2024/non-competes/
5.
by mac-chaffee 2y ago
I welcome a k8s replacement! Just how there are better compilers and better databases than we had 10-20 years ago, we need better deployment methods. I just believe those better methods came from really understanding the compilers and datab
6.
by mac-chaffee 2y ago
Author here. Yes there were many times while writing this that I wanted to insert nuance, but couldn't without breaking the format too much. I appreciate the wide range of interpretations! I don't necessarily think you should alwa
7.
by mac-chaffee 2y ago
Shocked that there was a tiller instance running. That's been deprecated since 2020: https://helm.sh/blog/helm-v2-deprecation-timeline/
8.
by mac-chaffee 2y ago
The use-case seems to be intentionally narrow: > The Secrets Manager Agent provides compatibility for legacy applications that access secrets through an existing agent or that need caching for languages not supported through other soluti
9.
by mac-chaffee 2y ago
Some of the use-cases mentioned would mean FERPA applies: https://studentprivacy.ed.gov/faq/i-want-use-online-tool-or-... Surprised FERPA wasn't mentioned explicitly. At least this version doesn't use the dat
10.
by mac-chaffee 2y ago
Each with a unique public IPv4 address too!
11.
by mac-chaffee 2y ago
It's especially frustrating that I firmly believe operations is a solved problem, but good luck getting a company to adopt the practices that every other mature tech company has already figured out.
12.
by mac-chaffee 2y ago
Build-related fixes are only treating the symptoms, not the disease. The real fix would be better sandboxing and capability-based security[1] built into major OSes which make backdoors a lot less useful. Why does a compression library have
13.
by mac-chaffee 3y ago
That would only be true if WAFs weren't so easily bypassed: https://habr.com/en/companies/dsec/articles/454592/
14.
by mac-chaffee 3y ago
I personally consider the ArgoCD UI an anti-feature. Attaching some hulking mass of Javascript dependencies to the thing that has cluster-admin rights to my production cluster is unnecessary attack surface for me. ArgoCD also has its own au
15.
by mac-chaffee 3y ago
In actuality, WAFs hurt more than help. They give a false sense of security since they are so easily bypassable, plus they have a significant performance cost and a significant chance of blocking legitimate traffic: https://www.m
16.
by mac-chaffee 3y ago
WAFs are 2000s-era software that have long overstayed their welcome: https://www.macchaffee.com/blog/2023/wafs/
17.
by mac-chaffee 3y ago
We have been working this year to increase our US presence, and we're hiring now: https://join.com/companies/qdrant/9929148-cloud-platform-dev... Source: I work at Qdrant from the US :)
18.
by mac-chaffee 3y ago
I wrote about this here: https://www.macchaffee.com/blog/2023/ethics-self-attestation... Too many jaded technologists throw their hands up and just ignore ethics. At least ACM are _doing something_ about it.
19.
by mac-chaffee 3y ago
The encryption Chrome uses isn't just some key on disk that can be scooped up. On macOS at least, it's stored in the secure enclave which only signed Chrome binaries can access. Now all this is pointless due to Chrome allowing rem
20.
by mac-chaffee 3y ago
What I want next is for FireFox to do something to protect my cookies on disk. Chrome at least encrypts them using a key backed by the system keychain (although Chrome allows remote debugging from any other process, negating any benefits)
21.
by mac-chaffee 3y ago
I actually wrote this post in preparation for a fight about WAFs with a SOC2 auditor, wish me luck! :) The specific control says "Boundary protection systems (for example, firewalls, DMZs, IDS/IPS, and EDR systems) are configured,
22.
by mac-chaffee 3y ago
DDoS prevention is outside my area of expertise, so I'm not sure. I should clarify that this blog isn't referring to that use-case :)
23.
by mac-chaffee 3y ago
Kin selection takes place within a single species: > The DNA confirmed that both the sailors and tiny passengers inside the hemisphere belong to the same species.
24.
by mac-chaffee 3y ago
Unfortunately, differentiating good behavior from malicious behavior is a central pillar of security, and the existence of this feature undermines that pillar. * The fact that it's in a popular signed binary means it bypasses app allow
25.
by mac-chaffee 3y ago
Funnily enough, "the end of time" for NFSv3 is in about 15-83 years, depending on whether the implementation uses signed or unsigned 32-bit integers for timestamps: https://lwn.net/Articles/717076/
26.
by mac-chaffee 3y ago
DevOps still must draw the line somewhere. DevOps people typically don't physically plug cables into switches, for instance. With the ever-growing complexity of infra, I see that line having to shift more and more, with either PaaS pro
27.
by mac-chaffee 3y ago
Location: NC Remote: Yes Willing to relocate: No Resume: https://www.macchaffee.com/ Technologies: Kubernetes, Linux Admin., Security, Python, Ansible, SRE, Platform Engineering Email: On resume
28.
by mac-chaffee 3y ago
I write about DevOps (mainly containers and Kubernetes) and security stuff: https://www.macchaffee.com/blog/
29.
by mac-chaffee 3y ago
That looks closer to the right solution, but... > Remember, your private key is your identity in Nostr, so if it is compromised you'll lose your followers and will have to start from scratch rebuilding your identity. This is the sam
30.
by mac-chaffee 3y ago
No, that was a separate incident: https://www.theregister.com/2020/12/16/solarwinds_github_pas... From what I can tell, all we know is that the attackers definitely got into their build system (since the troj

More ›