#44: You're Doing SSH Wrong

🎧 PODCAST/WEBINAR OF THE WEEK

This episode from DevOps Pradox discusses the challenges with StatesfulSet applications and the items you’ve got to get right first before you can even think about scaling your applications to multi-region or even multi-cloud 🌎

📖 POSTS OF THE WEEK

How to Run WebAssembly Workloads on Kubernetes with Rust
WebAssembly is one of the most exciting and underestimated software technologies invented in recent times. It's a binary instruction format for a stack-based virtual machine that aims to execute at native speeds with a memory-safe and secure sandbox. This post covers how to use Krustlet to run a Wasm workload written in Rust on Kubernetes.
Read more »

"Kubernetes and containerization trends" - Docker gets less popular as the container runtime while Kubernetes popularity in production increases. Also, adoption rates of the OpenShift platform has increased by 28% over the past year, and, for the most part, those are big businesses - Read more »

"Secure your Kubernetes deployments" - A recent survey by Red Hat found that about 90% of respondants had at least one security incident in their K8s cluster. This post present three tools to valdiate and secure your K8s deployments - Read more »

"Anatomy of a JWT" - You may have heard about JSON Web Tokens (JWTs), but do you understand what they are under the hood? - Read more »

"A closer look at the LAPSUS$ data extortion group" - Microsoft and Okta both this week disclosed breaches involving LAPSUS$, a relatively new cybercrime group that specializes in stealing data from big companies and threatening to publish it unless a ransom demand is paid. Here’s a closer look at LAPSUS$ - Read more »

"If you’re not using SSH certificates you’re doing SSH wrong" - SSH has some pretty gnarly issues when it comes to usability, operability, and security. None of these issues are actually inherent to SSH. They’re actually problems with SSH public key authentication. The solution is to switch to certificate authentication - Read more »

"Why Single Sign On sucks" - I've never been a fan of single sign on (SSO). Its only purpose is to make life easier for the users at the expense of security - Read more »

📕 BOOK OF THE WEEK

I find all the major Silicon Valley tech giants’ origin stories fascinating. Instagram is one of the few that feel different to me. This book does a great job of explaining the founders and what set them apart, while chronicling the Facebook acquisition’s dual catapulting/spoiling effect on Instagram. The book also does a great job of showing the founders influence on the culture inside the IG network, and how each evolution of the app changed that culture.

🛠 PROJECTS OF THE WEEK

The company 0x4447 builds products to increase standardization and security in AWS Organizations. They do this with automated pipelines that use well structured projects to create secure, easy to maintain and fail tolerant solutions. One of which is their VPN product – built on top of the popular OpenVPN® project, which has no license restrictions. You are only limited by the network card in the instance - Read more »

Run linux applications faster and safer than linux with open-source unikernels. Boot your first unikernel in seconds. Run on any cloud with no porting necessary. Easier than Kubernetes. Unikernels aren't just the future - they run in prod today - Read more »

Qubes OS is a free and open-source, security-oriented operating system for single-user desktop computing. Qubes OS leverages Xen-based virtualization to allow for the creation and management of isolated compartments called qubes - Read more »

Kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient - Read more »

Kubetools is built with a purpose to build a curated list of popular Kubernetes tools (cluster management, monitoring, logging, service mesh and others). It is actively maintained by the open source community - Read more »

💼 OPEN JOBS OF THE WEEK