kevinrineer
Joined 1 year ago
Joined 1 year ago
I'm really curious to see if cyber-security goes for a small, minimal approved list of vetted models and harnesses or if the majority of the community leans towards the liability angle.
This correction is not an endorsement.
I'll happily try it.
My thoughts, ignoring my technical disagreements, would be that you'd want to setup clients to have a specific set of software per their government role. A nix store could expose more software than you planned on supporting (e.g. forgotten software or licensed software).
Now that's a fairly interesting project and a way to actually bring technology like NixOS to the administrators in the way they expect. From my experience (sample size one, yes) there are more systems administrators that use web interfaces for management than DevOps IaC folks. This would be a good bridging solution if it is a successful project.
[1] - https://members.dawo.community/en/blog/blog-1/dawo-nixos-wor...
Otherwise, you could see Javascript running on a server and instantly know something was odd, depending on the server.
[1] - https://www.darktrace.com/blog/darktrace-identifies-campaign...
So that's where in the training set current models get that phrase! /j
Just a matter of curiosity for me as my career progresses, where I think that is the ideal, but I don't work in a heavily privatized nor regulated space at the moment of posting.
I did read your latest blog post looking for an answer, but it wasn't clear to me from that reading.