I have yet to see VPN guides that do not assume only two options: that you want to pay $10/mo forever or you already have a CS degree. Neither would apply to most people. Building your own VPN is in…
You‘ve unknowingly used apps that use them. Google‘s using one to gather statistics about how Chrome is used. Apple‘s working on one to improve autocorrect without actually reading anything you type. These aren‘t just corporate privacy spin. They‘re real systems…
You’re to go on a 6-hour flight. No Wi-Fi. When you play Apple Music, half of the songs in a playlist don’t play. This app only buffers and nothing else. That’s not a bug. That’s Apple Music being exactly the…
Suppose you work in a hospital.Suppose you are an employee at a hospital. Data that has been collected over the years, which you may have, that you might be able to use to train a machine learning model that could…
When I was first making a serious attempt to look at women’s watches, here’s a revelation I had for you: The label “women’s” very little useful information when considering a watch. It doesn’t tell you how it will go around…
The Problem With How Most Teams Handle Secrets Most write introductions to Kubernetes demonstrate you how to make a Secret item in just three lines of YAML. They never reveal that their secrets, by default, are base64 encoded strings in…
The Shift Nobody Talked About (But Everyone Felt) CSR once consisted of a shiny annual report and a picture of them planting trees. Most of that time is a distant memory now. In the past five years, businesses, ranging from…
The vast majority of teams leave the entrance door to their Kubernetes cluster locked and all their internal window open. Network policies are tacked on to the end. Service-to-service traffic is not encrypted. “Zero trust” remains a seldom-seen slide in…
The Problem Most Guides Skip If you are locked out of a Windows 10 computer, it has to be a trivial problem to solve, isn’t it? – until you are looking at the logon screen and don’t know what type…
The majority of teams approach container security by simply taking it down to a checklist. Once the photo is scanned, check the box, skip to the following image. However, for those who have worked on any real Kubernetes cluster, you…
Most Teams Secure the App. They Forget the Cluster. This is a trend that I have seen over and over again in the kinds of enterprise Kubernetes Setups I work with: develop the code’s application for weeks, you put the…
Why the 4Cs Model Exists and Why It Actually Makes Sense Security guidelines for kubernetes generally shower us with technical jargon. Harden your nodes. Scan your images. Watch your RBAC. The list could be endless, you are bombarded by them…