We love our quirky, slow 1993 Mitsubishi JB500 campervan (https://www.instagram.com/finnthejb500/), but the experience is not for everyone. We were able to register it in Washington without too much hassle. It definitely pays to do some research and try to find a local-ish mechanic willing to work on them before you make the purchase.
For a different angle on cloud infrastructure visualization, check out Abridge (https://abridge.io). I'd love to get any feedback on the idea / site and even a trial, if you're interested!
Abridge collects data across your configured set of AWS accounts & regions. It doesn't draw architecture diagrams, but instead will give you x-vs-y visualizations for a number of different relationships .. IAM users vs. groups, Lambda functions vs. runtimes, EC2 instances vs. keypair, etc.
It'll also provide inventory tables / CSV dumps of the different resource types, and simple free search across all resources.
Security-wise, Abridge collects data via cross-account trusts with the SecurityAudit role, and expires all collected data after 48 hours - more at https://abridge.io/security/.
Physical products are so very different to virtual. Life is relatively easy when you can just ctrl-z, quit-without-saving, git checkout --, or redeploy. A friend has been working on this idea for the last couple of years.. it's been interesting watching him work through the process.
It's proactive, but I've been working in various security-oriented IT roles for ~15 years now, and I'm trying to take my own advice [1], so I'd hope I can do it justice. :)
I've been building and using https://abridge.io/ for a while now, and it's getting to the point where it is hopefully useful to others. It essentially aggregates information about AWS deployments across multiple accounts and regions into a single visualization / inventory / search interface.
Security is of course a concern - I address that in more detail at https://abridge.io/security/ but the two main parts - 1) collect data from AWS accounts via read-only cross-role access (AWS-managed SecurityAudit policy) and 2) throw all that data away every 48 hours (S3 object expiration).
It still has rough edges, but I'd greatly appreciate a) any feedback on site/content and b) signups from folks who might be interested in testing it out...
HashiCorp | Product Security Engineer | US / UK / Canada / Netherlands / Germany | FULL-TIME | REMOTE
We are looking for Product Security Engineers to help scale our product security function, which works closely with engineering & product management to ensure that security is appropriately addressed across the HashiCorp product suite.
In this role, your responsibilities will include:
* Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp’s products, services, and associated cloud infrastructure.
* Build and implement security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc.
* Monitor threats and vulnerabilities impacting HashiCorp products and services, develop proof-of-concepts as appropriate, identify mitigations and assess/communicate associated risk.
We are looking for talented self-starters with 4+ years of security experience. We will consider experienced engineers with less security-specific experience but the desire to learn!
I started skiing as a kid, switched to snowboarding as a teenager, then started skiing again now in my mid-30s. Picking up skiing again after ~20 years was a lot of fun; nice to feel like I'm learning something new again but still know how snow feels and mountains work.
From my own experience, and watching a number of other friends, the first 2-3 days of skiing is easier than the first 2-3 days of snowboarding.
These days I'll happily ski/board most places on most mountains (in-resort, at least) but if I'm getting into technical terrain will vastly prefer a snowboard.. much quicker recovery time if you fall, often you can just bounce back up w/out fully stopping. I'd argue that snowboards are more fun in the pow as well.. skis are great for the hard-and-fast groomer days!
If you're a nerd, and you like skiing / boarding, then check out ski touring / splitboarding. Add backcountry travel, navigation, skin track setting, & most importantly avalanche / snow safety, and you've got a sport that is almost endless in terms of things to learn & keep in mind while you're out and about. And it's excellent exercise while you're at it!
Just make sure you time it right. The problem with EFX was they announced on September 7, dipped, then announced additional badness on September 13, so double-dipped (https://s.yimg.com/uc/fin/chart/18/08/39d3a24.png) and you were out ~30% immediately.
