> On other nitpick is that startups live and die with automation by their lean nature. They have fewer resources and must automate everything they can. It's built into startups mindset.
I am at a medium sized company. We acquired a startup. They did not "live and die with automation", instead they contracted out the production operations. A dozen customers, all on snowflake systems which were constantly tweaked directly in prod with no documentation or audit process.
My experience on the acquirer side is that startup engineers like to just build stuff and deploy it. Design? Testing? Documentation? Automation? None of that existed in this company in any fashion. And they are themselves grating against a modicum of process. Please explain what you want to do, why, and provide a high level design. You are going to replace the whole auth system, it's not something you just "figure out" as you go along... Sigh.
Agreed. It's sad how many security engineers still push outdated processes, when there is significant research which indicates _why_ it actually _reduces_ security.
> I think there's another word missing: "data sovereignty". Depending on your business, your customers might need to keep user PII within their country.
That's assuming a single multi-tenant saas footprint.
There is absolutely nothing preventing you from standing up a footprint in each compliance region and customers are assigned to the region that satisfies their requirements for data location.
You get the benefit of less footprints to manage, while still meeting the requirements necessary to serve your customers.
And if you have a customer that absolutely must have isolated infrastructure, stand one up for them and pass along the increased cost associated.
The study states:
"We studied sera from adults (ages 18 to 55 years) who received two doses of the Moderna mRNA-1273 vaccine in phase 1 clinical trials (12). The majority of our study focused on 14 individuals who received the 250-μg dose, although we validated key conclusions with a smaller subset of eight trial participants who received the 100-μg dose. The sera were collected at 36 and 119 days after the first vaccine dose, corresponding to 7 and 90 days after the second dose."
Strange that the study would focus on individuals who received a 250-μg dose. The adult dose is 100-μg (https://reference.medscape.com/drug/mrna-1273-moderna-covid-...). Yes, the study states that key findings were validated with 8 participants who received the regular dosage, but still seems odd to me.
The comparison dataset is explained as:
"The convalescent plasma samples were characterized in earlier studies (13–16) and grouped into an early time point of 15 to 60 days after symptom onset and a late time point of 100 to 150 days after symptom onset."
So the comparison was between vaccinated individuals, most of whom received a higher dose than is being given out, to infected individuals, and the time periods don't exactly line up. For the vaccinated dataset, the time periods were 7 and 90 days after the second dose. For the other dataset, the time periods were 15-60 days, and 100-150 days after symptom offset.
Deeper into the study, there is also this:
"The escape maps of the 100-μg cohort resembled those of the 250-μg cohort and fell into the 456/484-targeting, core-targeting, or flat categories (fig. S6). Although the sample sizes are small, and a higher fraction of the 100-μg dose escape maps were flat than for the 250-μg cohort (4 of 8 versus 5 of 14, respectively), this suggests that 100- and 250-μg doses elicit antibody responses similar in the breadth of their RBD-binding specificity."
Can't read whether this is sarcastic or tongue in cheek ;-)
Java 11 is the newest LTS release.
The next LTS release will be Java 17.
Many companies won't touch anything that isn't LTS. There are still a large number of companies staying on Java 8 :shrug:
I put one of these [1] in my office 2 years ago and am very pleased. It wasn't cheap, but I use it daily. It always wipes clean, and there is no ghosting. It's right behind my back when I'm at my desk, so I can also turn my webcam on it when in meetings.
I've tried to use electronic whiteboard alternatives and it's just not as fluid when trying to get ideas out. Maybe an iPad Pro with a Pencil, but I haven't sprung for one of those yet...
When I interview (and yes, there's whiteboard time), I tell the candidate up front and very clearly, "I will be your Google. I know we don't work in a vacuum"
If the container is running as root, and you escape the container, you are root on the host.
Containers share the kernel with the host, and are only as isolated as the uid the process in the container runs as and the privileges you grant that container.
If you're running pods as root, you're doing it wrong. That was a no-no with docker, and it's still a no-no for kubernetes. People still run non-containerized services as root too...
Instead, build your artifact and publish it to an artifact repository, just like we used to.
_then_ wrap that artifact in a Docker image.
Vulnerability found in the docker image? No problem. Build a new image with the same artifact.