kronin

This is why I haven't adopted the practice of "Build your artifact along with the docker image that packages it".

Instead, build your artifact and publish it to an artifact repository, just like we used to.

_then_ wrap that artifact in a Docker image.

Vulnerability found in the docker image? No problem. Build a new image with the same artifact.

> On other nitpick is that startups live and die with automation by their lean nature. They have fewer resources and must automate everything they can. It's built into startups mindset.

I am at a medium sized company. We acquired a startup. They did not "live and die with automation", instead they contracted out the production operations. A dozen customers, all on snowflake systems which were constantly tweaked directly in prod with no documentation or audit process.

My experience on the acquirer side is that startup engineers like to just build stuff and deploy it. Design? Testing? Documentation? Automation? None of that existed in this company in any fashion. And they are themselves grating against a modicum of process. Please explain what you want to do, why, and provide a high level design. You are going to replace the whole auth system, it's not something you just "figure out" as you go along... Sigh.

Agreed. It's sad how many security engineers still push outdated processes, when there is significant research which indicates _why_ it actually _reduces_ security.

> I think there's another word missing: "data sovereignty". Depending on your business, your customers might need to keep user PII within their country.

That's assuming a single multi-tenant saas footprint.

There is absolutely nothing preventing you from standing up a footprint in each compliance region and customers are assigned to the region that satisfies their requirements for data location.

You get the benefit of less footprints to manage, while still meeting the requirements necessary to serve your customers.

And if you have a customer that absolutely must have isolated infrastructure, stand one up for them and pass along the increased cost associated.

The study states: "We studied sera from adults (ages 18 to 55 years) who received two doses of the Moderna mRNA-1273 vaccine in phase 1 clinical trials (12). The majority of our study focused on 14 individuals who received the 250-μg dose, although we validated key conclusions with a smaller subset of eight trial participants who received the 100-μg dose. The sera were collected at 36 and 119 days after the first vaccine dose, corresponding to 7 and 90 days after the second dose."

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC8369496/

Strange that the study would focus on individuals who received a 250-μg dose. The adult dose is 100-μg (https://reference.medscape.com/drug/mrna-1273-moderna-covid-...). Yes, the study states that key findings were validated with 8 participants who received the regular dosage, but still seems odd to me.

The comparison dataset is explained as: "The convalescent plasma samples were characterized in earlier studies (13–16) and grouped into an early time point of 15 to 60 days after symptom onset and a late time point of 100 to 150 days after symptom onset."

So the comparison was between vaccinated individuals, most of whom received a higher dose than is being given out, to infected individuals, and the time periods don't exactly line up. For the vaccinated dataset, the time periods were 7 and 90 days after the second dose. For the other dataset, the time periods were 15-60 days, and 100-150 days after symptom offset.

Deeper into the study, there is also this: "The escape maps of the 100-μg cohort resembled those of the 250-μg cohort and fell into the 456/484-targeting, core-targeting, or flat categories (fig. S6). Although the sample sizes are small, and a higher fraction of the 100-μg dose escape maps were flat than for the 250-μg cohort (4 of 8 versus 5 of 14, respectively), this suggests that 100- and 250-μg doses elicit antibody responses similar in the breadth of their RBD-binding specificity."

Or NPM is having issues ;-) https://status.npmjs.org/

Wildfires burn up all the dead brush and make way for new growth, along with fertilizing the soil.

Please share the package managers that handle this, thanks!

Can't read whether this is sarcastic or tongue in cheek ;-)

Java 11 is the newest LTS release. The next LTS release will be Java 17. Many companies won't touch anything that isn't LTS. There are still a large number of companies staying on Java 8 :shrug:

Have you ever found confirmation that they use OpenDistro internally? I've looked and have been unable to find such a statement.

I put one of these [1] in my office 2 years ago and am very pleased. It wasn't cheap, but I use it daily. It always wipes clean, and there is no ghosting. It's right behind my back when I'm at my desk, so I can also turn my webcam on it when in meetings.

I've tried to use electronic whiteboard alternatives and it's just not as fluid when trying to get ideas out. Maybe an iPad Pro with a Pencil, but I haven't sprung for one of those yet...

[1] https://www.pegasusav.us/pegasus-magnetic-glass-marker-board...

You don't have to hand-write your openapi.yaml. we are using quarkus, and by annotating the endpoints you get a generated openapi.yaml.

We then use this in a typescript generator to generate client code.

Is it this one? https://vimeo.com/267445424

When I interview (and yes, there's whiteboard time), I tell the candidate up front and very clearly, "I will be your Google. I know we don't work in a vacuum"

2 of starboard's capabilities are to run kube-bench and kube-hunter, and yeah, aqua has been doing some great work for the community in this space.

So if a deployment is 2 minutes of downtime, you are limited to 2 per month if you still want to hit 4 9s of availability with no unexpected outages.

If the container is running as root, and you escape the container, you are root on the host.

Containers share the kernel with the host, and are only as isolated as the uid the process in the container runs as and the privileges you grant that container.

Ekscli (if you want managed) and kops (if you want to manage it yourself) are just as straightforward.

Sounds like your setup lacks high availability. If you don't believe you need that, then yeah, kubernetes is overkill.

If you're running pods as root, you're doing it wrong. That was a no-no with docker, and it's still a no-no for kubernetes. People still run non-containerized services as root too...

My employer did 20% across the board, 2 months ago. Security software.

There is significant value in text blob workflows.

Requiring the definition of everything that makes up your stack to be stored in a format that is not text adds complexity to the disaster recovery process, not to mention mutation, diffing, reviewing, approving, promoting, etc.

For places where a single environment that is updated in place and requires little/no approval to do so, sure. Personally I really like textual definition of infrastructure and configuration, and disagree that it is end days for them.

Interested

Not stopped, no. Slowed. Give the healthcare system a chance to deal with those that are coming in, without being overwhelmed. Give the researchers a chance to come up with an immunity shot. Time is our friend in this situation.

Are we talking total environmental impact? Sourcing materials, manufacturing, shipping to point of sale, usage, maintenance and finally disposal?

Edit: just did some research on electric vs. gas vehicles and their total environmental impact. Nothing specifically on motorcycles, but some of the data would apply.

"Based on where EVs have been sold, driving the average EV produces global warming pollution equal to a gasoline vehicle that gets 88 miles per gallon (mpg) fuel economy." https://blog.ucsusa.org/dave-reichmuth/are-electric-vehicles...

"In a 2015 study, the Union of Concerned Scientists found that gas-powered cars emitted almost double the emissions that contribute to global warming as electric vehicles, which can make up the difference from the manufacturing stage in six to 18 months of driving, depending on the size of the battery." https://www.businessinsider.com/building-electric-cars-how-m...

Does anyone have experience building graalvm native images with Bazel? Or quarkus more specifically?

Additionally, Greenfield dev where federated identity support is a requirement

How is an "incorrect understanding of the tax code" built into that statement? Are you saying that the average layperson doesn't understand the numbers shuffling that goes on to get the biggest deduction? All tax preparation advertisements I see on TV tout their ability to "get you the biggest refund". Why would it not be a safe assumption to apply that same thought to corporate taxes?

This was discussed here recently: https://github.com/djrobstep/migra

I haven't used it, but it fits your request of a postgresql specific migration tool where you don't have to futz with manually writing migration scripts.