• 1 Post
  • 15 Comments
Joined 2 years ago
cake
Cake day: June 28th, 2023

help-circle
rss


  • I mostly know what they do for a living. I am not really sure how old they are or what are their birthdays. But it simply isnt relevant.

    I had my bachelor’s party weekend last weekend, and my best man rented an airbnb. We were 9 guys and some of them did not know each other before. Doesnt matter, we had beer and a great time. I think, such details really dont matter, if not for small talk.







  • Indeed. Sure, they have these features, but only if used correctly while introducing vast more complexity (especially when being executed in a k8s environment,but also executed in plain docker). But, you know what also has security when used correctly? Plain linux.

    What about 90% of all images on docker hub executing their main payload as root? What about many images bundling unnecessary software like an init system? What about the fact that even if you rm something in a dockerfile, it is still present, if you execute the rm in a different RUN command? What about every user in the docker group being implicit root on the host since they simply can mount the host’s / inside their container? What about the reusing of layers between images like it is even intended?

    Doesnt sound like a security tool, does it? Sure, it feels a bit like one, but it was never intended to be one, but a dependency and environment bundling tool which happens to use certain linux APIs which can be used for security. But it wraps lots of abstraction around it.

    If you want to use these features for security, access them manually. But, OP said they are kind of a noob. Telling them to just use containers is dangerous and leads to false assumptions.

    Source: i work as a cloud/container/devops/k8s expert for over 5 years.





  • When i was at my first job in a factory as a trainee, they decided to remodel a manufacturing line and had to move some 40t hydraulic presses. They hired a crane, and the crane guy did the proper mounting of the presses. A 20cm steel beam through the mounting holes of the press, attached to the hook of the crane with these nylon carrying ropes. All fine.

    As he lift the press through a hole in the roof, the steel beam just fucking breaks into two pieces. The whole 40t press falls to the ground from a height of 3 meters, leaving a crater of 50cm in depth in the concrete. The broken off piece of the steel beam slams into the driver cabin of the crane, which luckily was reinforced with a steel cage behind the window. This cage saved the crane operator’s life.

    We were on a smoke break and watched everything. Fucking crazy.

    Never step under heavy load hanging from a crane. Never ever.




  • I am currently in the middle of such an event. Small company, 30 persons. The CEO has an unnatural bond with the HR lady. She has shares of the company, and it is an open secret that he very much would like to fuck her.

    As a result she gets more and more freedom and behaves as she is somehow entitled of being a second CEO. She is absolutely terrible in management, and has an unusual high amount of fluctuation in her department which covers everything which isnt operative business. So far, in the last 5 years the company hired and was left by six salespeople and no less than 10 team assistants. We usually have two sales jobs and two assistance jobs to fill. This situation alone does not help to keep up our morale.

    The CEO keeps up a facade of “we are all family here” and therefore is quite open with announcements when someone new joins us and someone else leaves us. In the past week a newly hired Senior Account Manager quit after less than two weeks in the company. When he made the round of saying goodbye, he told everyone that he quits because he cant stand the management of HR Lady which is his boss.

    Since the CEO wants to fuck her he is always somehow covering her faults and trying to hide her incompetence. However, when he announced that not the account manager quit, but instead was fired, since they “could not accept his way of doing the work”, which was very obviously a blatant lie, this was the final straw.

    Currently all senior employees are either searching for something new or have already written, printed and signed their notice letters.