windowsworkstoo

thats chainguard’s entire value prop (they are quite well known in this sphere)

1000% correct. the second you look in the mirror and you're happy with what you see, baby, you just lost the battle.

The amount of ideas Karl had that have since come to fruition is quite remarkable

Agree, when MS moved their office file formats to xml, I made plenty of money building extremely customizable templating engines all based on a very small amount of XSLT - it worked great given all the structure and metadata available in xml

Probably the only improvements I can think is running the runner as a gMSA and applying the relevant ACL's to that, so you can avoid needing to supply creds.

Otherwise, on our fleet of hundreds of IIS, we've had success just pointing IIS to a hardlink, deploying the new version to a new folder and updating the hardlink - from memory this does trigger an app pool restart but its super fast, lets you go back and forth very easily.

This is just to make it an IdP initiated flow (instead of a SP initiated flow) and its to prevent the extra hop back and forwards between Okta/IdP and the application.

Very well said - even with open source there seems to be a general lack of willingness to actually read code, let alone crack open the disassembler or attach a debugger - the skill is apparently not taught anymore

In AU, even for aerial powerlines, we run our own mix of fibre and radio comms between zone subs and stuff like ACR's... in fact I dont think any of the transmission or distribution operators utilise any telco stuff for their control networks

Yah, this is why third party risk management is a thing. When I ran sec training, I always hammered home the point that a third party security issue is your issue.

Now, sure, technically there may be circumstances when you can technically/legally shift liability. But your customers don't care - they have the relationship with you. So the third parties problems, are your problems.

Global namespace shared resources, regional namespace shared resources, then each app provisions its own bit, consuming/linking the two aforementioned layers.

Everyone gets here eventually and you can just fight over stuff like “is an alb shared regional or app specific”

No, this is the new trend, browser isolation - see Island Browser for example

bowling is fucken weird..I was a junior almost pro bowler and I know Belmo, being around the same age, coming up at the same time and in the same area as him…he’s a freak in the best sense of the word. I remember some other kids who would bowl with a bigger hook (and their thumbs) but Belmo was just super consistent…knew he would do great and very glad he has, despite all the haters

The amount of ideas that Karl had which came to reality, that Steve and Ricky dismissed as mental is what keeps me listening to Youtube compilations of their show to this very day :D

There are API’s, just not public ones - only available under commercial agreement