apgwoz

I don’t use Twitter, but if I did, I would certainly want to archive the content of my timeline so I could refer back to it for journalistic reasons, perhaps, via a browser extension? No reason to lock down my “ownership” here, because it’d only be public posts. There are obvious fair use reasons for when I want to quote someone when I do acts of journalism. I’d even be willing to share my archive with anyone else, and advertise the tweet_ids I have in case another journalist wanted them. Sort of like… I dunno, napster? That’d be great.

Previously, they’ve stated that they raised merely to give customers confidence that they are in it for the long haul. You don’t want to buy racks from a company that won’t be around tomorrow. Raising money is likely being used to create a war chest, with some amount of it being used to grow the team and operations, to fill demand, and support their customers. Those functions have to grow sustainably, but the demand also signals to investors that it’s working, and continued investment is a good move.

In reality, it could very well be investors just saying “we’re so happy with how things are going, we want more, take our money!!!”

Thanks for the link! Very interesting!

You fool! Objects are a poor man’s closures!

Hmm. Is this why rail maps tend to look like circuit traces?

It’d kind of make sense for the operator status map to look like the map you hand out, or put in stations. The design is an abstraction good enough for understanding switching status for operators, why not for riders trying to get to Manhattan Beach?

16MB requirement! I wish all stuff was lightweight, like this! We’ve lost our way…

How many layoffs does a company have to do before realizing it’s in their best interest to start asking other companies to take the employees they don’t want to employ anymore?

Also, 75% placement seems wildly successful. Why isn’t Cisco also a head hunting firm?!

It’s absolute baseline, but yes, it relies entirely on the platform’s permissions model, the administrator who assigns permissions, and the application authors to not create vectors for env var dumps. :)

But honestly, if you’re in the container, and the application running in the container can get secrets, so can a shell user.

_Maybe_ there’s a model where the platform exposes a Unix domain socket and checks the PID, user, group of the connection, and delivers secrets that way? This has its problems, too, like it being non-standard, only possible in some scenarios and otherwise fallible… but better than nothing? If you reap the container when that process dies, you can’t race for the same PID, at least. I dunno

The Ed Zitron rant will be phenomenal.

Ah. The article has since been updated to point out that it’s not plaintext, but encrypted at rest (which would be expected). OK.

You’re thinking too much. When you run the app, the system decrypts the secrets and makes them available as env vars (or some other mechanism).

In an admin ui, you list the names of secrets only, and provide a “reveal” or a “replace” on each one. They are never decrypted unless explicitly asked for.

Is this perfect? Absolutely not. The key is controlled by the company, but it can be derived in a manner that doesn’t allow for the dump of everything if it’s leaked.

Not at all. I was simply making a joke on the parallel exploration of states.

You pretty much have to assume someone is going to put sensitive data in an input like this. Encryption by default is the only sensible choice.

Yeah, but… what if?