Suggested Reads

Suggested Reads

54794 bookmarks
Newest
Software Licensing Changes and Their Impact on Financial Outcomes
Software Licensing Changes and Their Impact on Financial Outcomes

Software Licensing Changes and Their Impact on Financial Outcomes

Another day, another rug pull. At least that’s what the cynical might say, as we as an industry once again are discussing the fallout of another company…

August 27, 2024 at 11:04AM

via Instapaper

·redmonk.com·
Software Licensing Changes and Their Impact on Financial Outcomes
Abusing Distroless containers: shell commands on shell-less containers with Harsha Koushik
Abusing Distroless containers: shell commands on shell-less containers with Harsha Koushik

Abusing Distroless containers: shell commands on shell-less containers, with Harsha Koushik

https://kube.fm/abusing-distroless-harsha

In this KubeFM episode, Harsha explores the intricacies of Kubernetes security, focusing on the benefits and misconceptions of Distroless container images and the broader aspects of container security.

You will learn:

The advantages and limitations of Distroless container images: understand why these images are smaller, have a reduced attack surface and are not inherently secure.

Best practices for container security: gain insights into selecting base images, managing dependencies, and fortifying your infrastructure at every layer.

Supply chain security: explore how the supply chain can be an attack vector and the importance of signing artifacts and validating sources.

Emerging Kubernetes tools and future projects: discover the latest tools Harsha is monitoring and get a sneak peek into his upcoming projects, including a new podcast and a tool for simulating multistage attacks in cloud-native environments.

Sponsor

This episode is sponsored by Learnk8s — estimate the perfect cluster node with the Kubernetes Instance Calculator

More info

Find all the links and info for this episode here: https://kube.fm/abusing-distroless-harsha

Interested in sponsoring an episode? Learn more.

via KubeFM https://kube.fm

August 27, 2024 at 08:00AM

·kube.fm·
Abusing Distroless containers: shell commands on shell-less containers with Harsha Koushik
AI to go nuclear? Data center deals say it’s inevitable
AI to go nuclear? Data center deals say it’s inevitable
Anticipating astronomical compute-intensive AI workloads, hyperscalers and heavy data center operators are turning to energy providers for nuclear-fueled solutions in a ‘global arms race for power … like nothing we have ever seen before.’
·cio.com·
AI to go nuclear? Data center deals say it’s inevitable
In a Kyiv hangar, Ukraine launches a cyber range for everyone
In a Kyiv hangar, Ukraine launches a cyber range for everyone
Beneath the wings of retired Soviet-era aircraft, Ukrainians recently took part in a cyber range program that organizers hope to expand far beyond the usual participants from military and intelligence agencies.
·therecord.media·
In a Kyiv hangar, Ukraine launches a cyber range for everyone
Revolutionary Quantum Compass Could Soon Make GPS-Free Navigation a Reality
Revolutionary Quantum Compass Could Soon Make GPS-Free Navigation a Reality
A milestone in quantum sensing is drawing closer, promising exquisitely accurate, GPS-free navigation. Peel apart a smartphone, fitness tracker or virtual reality headset, and inside you’ll find a tiny motion sensor tracking its position and movement. Bigger, more expensive versions of the same tec
·scitechdaily.com·
Revolutionary Quantum Compass Could Soon Make GPS-Free Navigation a Reality
CISA Finding: 90% of Initial Access to Critical Infrastructure Is Gained Via Identity Compromise. What Can You Do About It?
CISA Finding: 90% of Initial Access to Critical Infrastructure Is Gained Via Identity Compromise. What Can You Do About It?
Conventional wisdom suggests the keys to protect critical infrastructure against cyberattacks are network segmentation and OT security. But continued breaches imply those methods alone fall short. In fact, a CISA probe of 121 critical infrastructure networks found that their weakest link is identity compromise. Learn how to leverage an attacker’s perspective to better secure critical infrastructure.
·tenable.com·
CISA Finding: 90% of Initial Access to Critical Infrastructure Is Gained Via Identity Compromise. What Can You Do About It?
An MLB first! Jansen plays for both teams in same game
An MLB first! Jansen plays for both teams in same game
BOSTON -- The start of Monday’s continuation of a suspended game between the Red Sox and Blue Jays was history making. The Blue Jays sent up center fielder Daulton Varsho to pinch-hit for Danny Jansen, who had an 0-1 count when play was stopped due to rain with one out
·mlb.com·
An MLB first! Jansen plays for both teams in same game
Here’s the Pitch Deck for ‘Active Listening’ Ad Targeting
Here’s the Pitch Deck for ‘Active Listening’ Ad Targeting
404 Media previously reported Cox Media Group (CMG) was advertising a service that claimed to target ads based on what potential customers said near device microphones. Now, here is the pitch deck CMG sent to prospective companies. Google has kicked CMG off its Partner Program in response.
·404media.co·
Here’s the Pitch Deck for ‘Active Listening’ Ad Targeting
Automate Everything: How One Manifest Powers Your Entire DevOps Pipeline
Automate Everything: How One Manifest Powers Your Entire DevOps Pipeline

Automate Everything: How One Manifest Powers Your Entire DevOps Pipeline

Dive into the essentials of setting up developer platform and enabling developers to start new projects effortlessly. In this video, we explore how to create a seamless interface for developers using Crossplane, GitHub, and Argo CD. Learn how to automate repository creation, CI pipelines, GitOps integration, and database provisioning with a single manifest. Follow along as we demonstrate the entire process from setup to deployment, ensuring everything is secure, automated, and stored in Git. Perfect for developers looking to streamline their workflow and focus on coding. Watch now to simplify your development journey!

DeveloperTools #GitOps #Crossplane #ArogCD #GitHub

▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/internal-developer-platforms/automate-everything-how-one-manifest-powers-your-entire-devops-pipeline 🔗 Crossplane: https://crossplane.io 🔗 Argo CD: https://argoproj.github.io/cd 🎬 Crossplane Compositions | Tutorial (Part 3): https://youtu.be/X7E6YfXWgvE 🎬 Crossplane Tutorial: https://youtube.com/playlist?list=PLyicRj904Z99i8U5JaNW5X3AyBvfQz-16 🎬 Exploring KCL: Configuration and Data Structure Language; CUE and Pkl Replacement?: https://youtu.be/Gn6btuH3ULw 🎬 Crossplane Composition Functions | Tutorial (Part 5): https://youtu.be/XSzKs97Ls4g

▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please use https://calendar.app.google/Q9eaDUHN8ibWBaA7A to book a timeslot that suits you, and we'll go over the details. Or feel free to contact me over Twitter or LinkedIn (see below).

▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ Twitter: https://twitter.com/vfarcic ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/

▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox

▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 Introduction 02:08 One Manifest For Everything 11:36 What Happened and How Did It Happen?

via YouTube https://www.youtube.com/watch?v=IEgXJEkjBZ0

·youtube.com·
Automate Everything: How One Manifest Powers Your Entire DevOps Pipeline
Test of a prototype quantum internet runs under New York City for half a month
Test of a prototype quantum internet runs under New York City for half a month
To introduce quantum networks into the marketplace, engineers must overcome the fragility of entangled states in a fiber cable and ensure the efficiency of signal delivery. Now, scientists at Qunnect Inc. in Brooklyn, New York, have taken a large step forward by operating just such a network under the streets of New York City.
·phys.org·
Test of a prototype quantum internet runs under New York City for half a month
Is the Open Source Bubble about to Burst?
Is the Open Source Bubble about to Burst?
Is the Open Source bubble about to burst? While Free and Open Source Software (FOSS) isn’t just another tech trend, it’s facing real challenges as its adoption skyrockets. With millions…
·tarakiyee.com·
Is the Open Source Bubble about to Burst?