Kloud Tech

Build. Scan. Deploy.
Our mission is to provide and enable developers and teams around the world with DevSecOps tooling - without the headache!

[Kloud Tech @GoKloudTech]

Never say never, but point taken!

[Daniel Vassallo @dvassallo]

You will never do the things in your Ideas list.

Inspiration is perishable. That free energy you got when you had those ideas, isn’t there anymore.

[Kloud Tech @GoKloudTech]

In theory, there is no difference between theory and practice, but in practice there is.

[Computer Science @CompSciFact]

'Beware of bugs in the above code; I have only proved it correct, not tried it.' -- Donald Knuth

[Kloud Tech @GoKloudTech]

Tweet of 2021!

[Amit Gupta @amitkgupta84]

Maybe AWS keeps going down because they run all their stuff on prem

[Kloud Tech @GoKloudTech]

Boss move.

[Brad Fitzpatrick 🌻 @bradfitz]

Santa came early! 🎅🏻

🎄🎁 198.49.126.0/24 🎁🎄

I now have IPv4 space assigned to me from ARIN.

As always, I thankblame @dave_universetf for researching logistics. And @flydotio's blog post. And @tummycom (whose block it was from ~91), and @Ammar11296 for un-scaring me from it.

[Ivan Velichko @iximiuz]

Kubernetes UI/GUI/CLI projects

Gathered a list of (mostly open-source) projects offering Kubernetes UX enhancements.

Starting from the well-known solutions and down to projects mounting the Kubernetes API as a FUSE filesystem 🔽

[Kloud Tech @GoKloudTech]

Great article. #DevSecOps

[GitHub Security Lab @GHSecurityLab]

Learn how to leverage security frameworks and libraries in the new installment of our OWASP proactive control series https://t.co/tA2O8jgL4m

[Syft @SyftProject]

Great news! @GoReleaser can now generate an #sbom for your project... and it uses Syft by default! 🎉

[Kloud Tech @GoKloudTech]

@SwamiDaveSays You're right, I was just computing the average of those two states :)

[Kloud Tech @GoKloudTech]

Glass half full.

[David Adams @SwamiDaveSays]

@theryanking If you don't ask, it's already 'No'.

If they don't respond, it might be a 'No'.

If they said 'No', it could be 'Not Now'.

All it takes is 'Yes'.

[Kloud Tech @GoKloudTech]

@johncutlefish The Mythical Man-Month is the answer to any computer industry question.

[Kloud Tech @GoKloudTech]

Looking forward to all the installments. #DevSecOps

[Eric Rescorla @ekr____]

The Domain Name System (DNS) is at the heart of just about everything we do on the Internet, but unfortunately it's tragically insecure. Over the next few weeks I'll be covering what we can (and can't) do about it. First post up at: https://t.co/YiUetzhpW6

[Kloud Tech @GoKloudTech]

@ricardogerardi Condolences.

[@norootcause.surfingcomplexity.com on Bluesky @norootcause]

Capacity absorbs failure. If we invest in the right capacity, when failure happens, the system can use that capacity to absorb the failure.

(From Todd Conklin's excellent Pre-accident investigation podcast).

[Christine Hall @[email protected] @BrideOfLinux]

There's a new Debian in town: Debian GNU/Linux 11.2 "Bullseye" Released with 30 Security Updates and 64 Bug Fixes - @9to5linux https://t.co/h30XEvp243

[SentinelOne @SentinelOne]

👉We are sharing more tools and scripts to help with #log4j - Find our static scanner for Linux and for Windows and a dynamic scanner that supports patching - for Windows & Linux
https://t.co/Y2xO49yq1z

[Dan Lorenc @lorenc_dan]

Linux distros provide two main things: support (trusted supply chain, sec fixes) and stability (no breaking changes).

Log4j is another reminder that we need more of the first and less of the second.

Rolling distros are coming, @ArchLinuxSec and @alpinelinux are leading the way.

[Kloud Tech @GoKloudTech]

Good thread about build-time vs run-time security. #DevSecOps

[Matt Moore ⛓🚀 @mattomata]

Most folks understand the distinction between dev env (e.g. JDK) and runtime env (e.g. JRE).

The former includes all manner of tooling to develop and debug, and caters to the human.

The latter prunes this to the needs of the application.

[Kloud Tech @GoKloudTech]

See also: the "head" or the "resource" is not the person.

[Systemantics Quotes @SysQuotes]

THE DOSSIER IS NOT THE PERSON.

[Kloud Tech @GoKloudTech]

Nerd trivia.

[cyber_cox (@cybercox.bsky.social on bluesky) @Cyber_Cox]

There's a lot of talk about logs lately, but do you know why we call it a "log"? It's actually pretty interesting!

The term originated in the days of sail. Back then, sailors would determine their speed by throwing a literal log overboard, which was tied to a rope.

[Kloud Tech @GoKloudTech]

Handy overview of scanning container images for #log4j with different tools: https://t.co/VyEZvNBURN #DevSecOps