The Problem With How Most Teams Handle Secrets Most write introductions to Kubernetes demonstrate you how to make a Secret item in just three lines of YAML. They never reveal that their secrets, by default, are base64 encoded strings in…
The Shift Nobody Talked About (But Everyone Felt) CSR once consisted of a shiny annual report and a picture of them planting trees. Most of that time is a distant memory now. In the past five years, businesses, ranging from…
The vast majority of teams leave the entrance door to their Kubernetes cluster locked and all their internal window open. Network policies are tacked on to the end. Service-to-service traffic is not encrypted. “Zero trust” remains a seldom-seen slide in…
The Problem Most Guides Skip If you are locked out of a Windows 10 computer, it has to be a trivial problem to solve, isn’t it? – until you are looking at the logon screen and don’t know what type…
The majority of teams approach container security by simply taking it down to a checklist. Once the photo is scanned, check the box, skip to the following image. However, for those who have worked on any real Kubernetes cluster, you…
Most Teams Secure the App. They Forget the Cluster. This is a trend that I have seen over and over again in the kinds of enterprise Kubernetes Setups I work with: develop the code’s application for weeks, you put the…
Why the 4Cs Model Exists and Why It Actually Makes Sense Security guidelines for kubernetes generally shower us with technical jargon. Harden your nodes. Scan your images. Watch your RBAC. The list could be endless, you are bombarded by them…
For the majority of teams, having done a checklist once and failed nothing proves that their Kubernetes cluster has been “secured”. This isn’t a secure situation, this is luck. The actual story of hardening kubernetes is more mundane, more complex…
The internet looked very different five years ago. Websites were cleaner, simpler, and honestly a little boring. Now? Things have gotten interesting. Designers are taking bigger swings, users expect more, and the bar for what counts as a “good” website…
Until something seems awry, most people stay oblivious to GPS trackers. It could be a car you borrowed from friends that you don’t fully understand its terms of use, or a car you got from a business that you work…
The first part of most migration guides is a stark warning of the demise of Magento 1. You know that. In June 2020, Adobe axe officially ended support and, amazingly, tens of thousands of stores are still contributing to this…
The quiet crisis is going on in most big corporations now. Staff is inputting confidential information into public AI. Consumers check quotes with refreshable chatbots and finance teams conduct client projections.Consumer checks quotes with refreshable bots, finance departments conduct client…