Loeiz

I tweet mostly about software engineering, security, cloud infrastructure and sometimes tech culture.
Oh and I still love to code 🙀

[The Oatmeal @Oatmeal]

Exploding Kittens - July 2024

[Stanislav Kozlovski @kozlovski]

Think you know scale?

😂

You don't know S3 scale.

Dive in with me as we explore the curious bits from high level to low level:👇

[Loeiz @LoeizT]

@IdentityMonk Je crois que c’est une mission idéale pour la LCD Shovel 2007…

[Ars Technica @arstechnica]

Demand for fee to use password app LastPass sparks backlash https://t.co/TcqM3rP7Im

[Jacek Majchrzak @JacekMajchrzak_]

What is wrong with the current approach to Enterprise Architecture❓

This was a topic of discussion in the second part of my workshops at the @ddd_eu.
The whole exercise was very refreshing it felt like laying on a therapist couch 😄
I called that part “The punching bag”. 🥊

[Loeiz @LoeizT]

@tpierrain @anthyme @brunoboucard One advantage of acceptance tests is that seeing them pass is a lot more reassuring than having 100% unit test coverage.

[Loeiz @LoeizT]

Found this gem lost in my bookmarks: A detailed step by step guide describing the implementation of a gameboy emulator in JavaScript. Unusual, fun and insightful ! https://t.co/2bDvzbDLri

[Martin Fowler @martinfowler]

Another great article on covid transmission from @zeynep. A further example of where we need to look at more than the average to understand what's going on.

https://t.co/dlLulVmbZe

[so called parody. @cloud_opinion]

“What our customers have been telling us is that solutions that are out there today, Istio being a good example, are extremely complex,”

https://t.co/QybOdphVIo

Shots fired.

[Loeiz @LoeizT]

@IdentityMonk @duosec @Centrify @trusona_inc @okta My guess: they validate the Assertion signature against the embedded certificate instead of the one declared in the metadatas.

[Loeiz @LoeizT]

@IdentityMonk @duosec @Centrify @trusona_inc @okta Not sure what the "not validating certificates" option imply, but I don't think that's the real problem. Metadata exchange is a 1:1 trust setup, so there's no need to rely on a 3rd party (i.e. validating the certificate path). More info: https://t.co/3UBkRaj2Ec (§2.6.1)

[not just pixels @getifyX]

The saying "Jack of all trades, master of none" is usually used standalone in a sort of slight against generalists as lesser than specialists.

But the original full saying is quite enlightening:

"Jack of all trades, master of none, oftentimes better than a master of one."

[Loeiz @LoeizT]

@QuinnyPig @awscloud Another topic where Oracle got it right by calling it "root account". Damn, I can’t believe I’m praising Oracle on this one.

[Loeiz @LoeizT]

This seems wrong on so many levels that I don’t know where to start... Good luck HSBC. https://t.co/CFM60LRgY8

[Loeiz @LoeizT]

New article: some thoughts on Oracle Cloud https://t.co/v6kqI68ryz

[use case driven @tpierrain]

This one is insane 🤪 https://t.co/efBPBxKmkY

[Loeiz @LoeizT]

IBM Employees Hit With Widespread Layoffs: Reports https://t.co/QLCynEJsNg

[Loeiz @LoeizT]

@Tangui Yep but also card processors and many more... For non DSP2 APIs, custom authentication mechanisms are a no-no, standards then... OpenID or OAuth feel overkill for an API that is specific to a partner and also are far less understood in practice than mTLS or PSK...

[Loeiz @LoeizT]

First blog post (hopefully not the last) on a seemingly trivial subject: #mTLS & authorization: https://t.co/KAqgds9Xzo

[Loeiz @LoeizT]

Relying on this kind of tools also shows how much you’re lazy at recruiting. It should take as much effort to the recruiter than the candidate.

[Corey Quinn @QuinnyPig]

If you're using @codesignalcom's "Certify" product, allow me to showcase how profoundly abusive it is to the candidates you're supposedly attempting to woo.

[Loeiz @LoeizT]

@IdentityMonk Thanks ! I also miss those times... I have a lot less occasions now to have a fierce debate around a bunch of beers... but... did I ever teach you something ? Or was I too drunk at that time to remember ? 😅