#random - July 2018 | Slack Archive

129 messages

A place for non-work-related flimflam, faffing, hodge-podge or jibber-jabber you’d prefer to keep out of more focused work-related channels.
Archive: https://archive.sweetops.com/random/

Jun 2018

July 2018

Aug 2018

Maarten van der Hoefalmost 8 years ago

https://github.com/eslint/eslint-scope/issues/39 oops

Erik Osterman (Cloud Posse)almost 8 years ago

https://eslint.org/blog/2018/07/postmortem-for-malicious-package-publishes

Erik Osterman (Cloud Posse)almost 8 years ago

On July 12th, 2018, an attacker compromised the npm account of an ESLint maintainer and published malicious versions of the eslint-scope and eslint-config-eslint packages to the npm registry. On installation, the malicious packages downloaded and executed code from pastebin.com which sent the contents of the user’s .npmrc file to the attacker. An .npmrc file typically contains access tokens for publishing to npm.

Erik Osterman (Cloud Posse)almost 8 years ago

Scope of this could be much, much larger

Erik Osterman (Cloud Posse)almost 8 years ago

As many npm module repos could now be compromised

Erik Osterman (Cloud Posse)almost 8 years ago

Scary

Erik Osterman (Cloud Posse)almost 8 years ago

npm has revoked all access tokens issued before 2018-07-12 12:30 UTC. As a result, all access tokens compromised by this attack should no longer be usable.

Erik Osterman (Cloud Posse)almost 8 years ago

Thank god

Maarten van der Hoefalmost 8 years ago

https://pullreminders.com

Erik Osterman (Cloud Posse)almost 8 years ago

Reposting: http://ptsochantaris.github.io/trailer/

Erik Osterman (Cloud Posse)almost 8 years ago

These PR stats in "pullreminder" are nice

erikalmost 8 years ago

@Erik Osterman (Cloud Posse) uploaded a file: image.png

erikalmost 8 years ago

@Erik Osterman (Cloud Posse) uploaded a file: Pasted image at 2018-07-13, 4:11 PM

erikalmost 8 years ago

@Erik Osterman (Cloud Posse) uploaded a file: Pasted image at 2018-07-13, 4:11 PM

erikalmost 8 years ago

@Erik Osterman (Cloud Posse) uploaded a file: Pasted image at 2018-07-13, 4:13 PM

Erik Osterman (Cloud Posse)almost 8 years ago

@Daren ☝️ you don't get this with trailer 😃

erikalmost 8 years ago

@Erik Osterman (Cloud Posse) uploaded a file: image.png

Jamie Nelson (BitFlight)almost 8 years ago

I need to have more of us know about this app: https://github.com/nvbn/thefuck/blob/master/README.md

Jamie Nelson (BitFlight)almost 8 years ago

Also, this tool for ecs deployments. https://getmu.io/ which i would like to test and compare to doing it all in terraform.

sarkisalmost 8 years ago(edited)

oh ya i use to use thefuck lol

sarkisalmost 8 years ago

now i do more screensharing with clients though 😐️

sarkisalmost 8 years ago

maybe i could start again and alias it lol

Jamie Nelson (BitFlight)almost 8 years ago

hehe

Jamie Nelson (BitFlight)almost 8 years ago

change it to "please"

Jamie Nelson (BitFlight)almost 8 years ago

Also, has anyone used weaveworks?

Jamie Nelson (BitFlight)almost 8 years ago

https://www.weave.works/blog/using-weave-to-network-containerized-microservices-on-amazon-ecs/

Erik Osterman (Cloud Posse)almost 8 years ago

it’s one of the standard network drivers for kubernetes

Erik Osterman (Cloud Posse)almost 8 years ago

but haven’t considered it for ECS

Erik Osterman (Cloud Posse)almost 8 years ago

@Jamie Nelson (BitFlight) what’s the driver for you?

Jamie Nelson (BitFlight)almost 8 years ago

As in what motivates me? Or what network mesh am I currently using? Or why am I looking at weave for ecs?

Erik Osterman (Cloud Posse)almost 8 years ago

what problem are you looking to solve by adding weave into the mix?

Erik Osterman (Cloud Posse)almost 8 years ago

mu looks pretty 😃 would like a primer on how to best leverage it in combination with terraform

Erik Osterman (Cloud Posse)almost 8 years ago(edited)

Weave Net simplifies by handling service discovery and load balancing for you.

Erik Osterman (Cloud Posse)almost 8 years ago(edited)

not problems we are currently facing

Jamie Nelson (BitFlight)almost 8 years ago

I haven’t had a need or a problem to use weave for. But I wanted to get on to using it as my project scopes are becoming larger

Erik Osterman (Cloud Posse)almost 8 years ago

Weave Net supports other use cases, which include transparent cross-region connectivity, cross-cloud, and multicast.

Erik Osterman (Cloud Posse)almost 8 years ago

sounds more interesting

Erik Osterman (Cloud Posse)almost 8 years ago

but no project scope large enough 😃

Jamie Nelson (BitFlight)almost 8 years ago

I had thought in the past it might be the bridge between onsite development environments and the hosted resources

Jamie Nelson (BitFlight)almost 8 years ago

That could be used in a way as if they were local

Jamie Nelson (BitFlight)almost 8 years ago

Sandboxes dev environments with debugging and tracing capacity that allow high pace of change and testing locally without having to push to git or start a pipeline is a common requirement

Erik Osterman (Cloud Posse)almost 8 years ago

kuberentes has this: https://www.telepresence.io/

Jamie Nelson (BitFlight)almost 8 years ago

And sometimes you can just use offline versions of technologies, like dynamodb and sns etc

Erik Osterman (Cloud Posse)almost 8 years ago(edited)

which is kind of like what you say

Erik Osterman (Cloud Posse)almost 8 years ago

have you seen this project? it’s sweet

Jamie Nelson (BitFlight)almost 8 years ago

Oh that’s nice

Jamie Nelson (BitFlight)almost 8 years ago

I haven’t

Jamie Nelson (BitFlight)almost 8 years ago

I am wanting something for serverless dev too

Erik Osterman (Cloud Posse)almost 8 years ago

you deploy a service in your cluster that identifies itself as the service you need

Erik Osterman (Cloud Posse)almost 8 years ago

but then it creates a reverse proxy tunnel back to your laptop

Erik Osterman (Cloud Posse)almost 8 years ago(edited)

that way you can develop locally, but other services in the cluster talk to it as though it were natively running in kubernetes

Jamie Nelson (BitFlight)almost 8 years ago

Do we (the cloudposse massive) have an awesome-xyz style key reading/tools/reference page?

Jamie Nelson (BitFlight)almost 8 years ago

https://github.com/sindresorhus/awesome/blob/master/readme.md

Erik Osterman (Cloud Posse)almost 8 years ago

Kind of

Erik Osterman (Cloud Posse)almost 8 years ago

Sec

Erik Osterman (Cloud Posse)almost 8 years ago

https://docs.cloudposse.com/tools/

Erik Osterman (Cloud Posse)almost 8 years ago

https://github.com/cloudposse/docs/tree/master/content/tools

Erik Osterman (Cloud Posse)almost 8 years ago

Also, not sure if you’ve seen our massive glossary. https://github.com/cloudposse/docs/tree/master/content/glossary

Erik Osterman (Cloud Posse)almost 8 years ago

This automatically highlights terms across the site

Erik Osterman (Cloud Posse)almost 8 years ago

Our tools page is currently focused on what we use. We could add a page like awesome though

Cristinalmost 8 years ago

Hi all! What's the best channel to post a question about an issue I have with one of your modules? Thank you!

Erik Osterman (Cloud Posse)almost 8 years ago

hey! thanks for asking

Erik Osterman (Cloud Posse)almost 8 years ago

let's move that to #terraform

Erik Osterman (Cloud Posse)almost 8 years ago

https://krebsonsecurity.com/2018/07/google-security-keys-neutered-employee-phishing/

Jamie Nelson (BitFlight)almost 8 years ago

One of my clients wants to hire me, but I’m moving out of London in 5 months plus I’m employed. So it won’t work. If there are any freelancers that are aws skilled, Terraform, dev team management background peeps on here in London... let me know and I’ll put you forward. :)

Andriy Knysh (Cloud Posse)almost 8 years ago

interesting article about using separate AWS accounts https://hackernoon.com/managing-seperate-aws-accounts-iam-deployments-e7e3ca038d53

krogebryalmost 8 years ago

@Andriy Knysh (Cloud Posse) tl;dr is that covering orgs?

krogebryalmost 8 years ago

Orgs are probably my favorite feature right now

krogebryalmost 8 years ago

Quality lesson about security happening with LifeLock right now

krogebryalmost 8 years ago

If you haven't caught the news, I'm sure it'll be coming up soon.

krogebryalmost 8 years ago

Lesson learned: you can have the most bad ass cloud security, but things still happen.

Erik Osterman (Cloud Posse)almost 8 years ago

Oh wow

Erik Osterman (Cloud Posse)almost 8 years ago

Reading about it now

Erik Osterman (Cloud Posse)almost 8 years ago

https://krebsonsecurity.com/2018/07/lifelock-bug-exposed-millions-of-customer-email-addresses/

krogebryalmost 8 years ago

yeah, leanring more about it today

krogebryalmost 8 years ago

Apparently the guy told us, we dropped that part of the site ( yeah for microservices ) pushed a patch and fixed the problem

krogebryalmost 8 years ago

IMHO, that's about the best outcome you could ask for

Andriy Knysh (Cloud Posse)almost 8 years ago

yea, it’s bad for LifeLock

Andriy Knysh (Cloud Posse)almost 8 years ago

what I learned some time ago is that using integers on URLs as IDs is a very bad idea

Andriy Knysh (Cloud Posse)almost 8 years ago

you can enumerate them very easily

Andriy Knysh (Cloud Posse)almost 8 years ago

use GUIDs

Andriy Knysh (Cloud Posse)almost 8 years ago

@krogebry Org is just metadata on top of the root account. The article confirms what we’ve been doing - use separate AWS accounts for more security and control

krogebryalmost 8 years ago

Used orgs with a client with something like 5 accounts for security, like you say

krogebryalmost 8 years ago

The neat thing was that we could just switch between accounts without having to relog

krogebryalmost 8 years ago

super handy!!

Andriy Knysh (Cloud Posse)almost 8 years ago

i agree

Andriy Knysh (Cloud Posse)almost 8 years ago

it’s more complicated to setup and provision, but you get a lot of benefits from it

Erik Osterman (Cloud Posse)almost 8 years ago

https://www.bloomberg.com/news/articles/2018-07-26/slack-and-atlassian-team-up-to-take-on-microsoft-in-chat-software

Erik Osterman (Cloud Posse)almost 8 years ago(edited)

R.I.P. stride

Erik Osterman (Cloud Posse)almost 8 years ago

I am elated that I won’t have to join anymore Hipchat or stride teams

Max Moonalmost 8 years ago

lol

Jonathan Olsonalmost 8 years ago

hipchat left a lot to be desired. do not miss it.

Jonathan Olsonalmost 8 years ago

never tried stride.

krogebryalmost 8 years ago

Seriously thought that was an onion article at first

Erik Osterman (Cloud Posse)almost 8 years ago

HAHA yea, me too. I had to reread it to make sure it said what I thought it said.

Rohit Vermaalmost 8 years ago

https://github.com/jenkins-x/jx

Erik Osterman (Cloud Posse)almost 8 years ago

http://services.google.com/fh/files/misc/the-site-reliability-workbook-next18.pdf

Erik Osterman (Cloud Posse)almost 8 years ago

This is the 2018 followup based on the original Google SRE book

Dave Yualmost 8 years ago

the SRE book is also free to read online right now https://landing.google.com/sre/book.html

krogebryalmost 8 years ago

Is that "y'all suck so bad we're giving this to you free" or "we love the community so much we want to help make it better" ?

Andriy Knysh (Cloud Posse)almost 8 years ago

i think it’s Attention Deficit Disorder - nobody will read a 500-page book these days

Erik Osterman (Cloud Posse)almost 8 years ago

Lol it’s good stuff, but pretty dense

Erik Osterman (Cloud Posse)almost 8 years ago

Btw, we have our own former Google SRE here 👋 @tamsky

krogebryalmost 8 years ago

ohh nice

krogebryalmost 8 years ago

I read the book

krogebryalmost 8 years ago

Had some dry parts for sure, but plenty of usable snippets to pull out as justification for removing the gun from a clients own foot

johntellsallalmost 8 years ago

Hi all! Let me introduce myself. I'm super interested in the intersection of Dev, Devops, and Quality. I'm a proponent of containers, Kubernetes, Terraform, and feedback loops. I worked with Erik briefly a couple years back, thanks for inviting me!
I twit err tweet at johntellsall ; blog at <http://johntellsall.com>

Erik Osterman (Cloud Posse)almost 8 years ago(edited)

Welcome @johntellsall! Glad to have you onboard 😃

Erik Osterman (Cloud Posse)almost 8 years ago

https://dependabot.com/

Erik Osterman (Cloud Posse)almost 8 years ago

Too bad not terraform modules!

Erik Osterman (Cloud Posse)almost 8 years ago

But it does support submodules and docker!

Erik Osterman (Cloud Posse)almost 8 years ago

@Max Moon pretty cool way to keep your geodesic account modules up to date

erikalmost 8 years ago

Erik Osterman (Cloud Posse)almost 8 years ago

https://github.com/cloudposse/prod.cloudposse.co/pulls

Erik Osterman (Cloud Posse)almost 8 years ago

https://github.com/dependabot/feedback/issues/118

Erik Osterman (Cloud Posse)almost 8 years ago

Upvote! 😃

Michal Matyjekalmost 8 years ago

I highly recommend dependabot - the dev is also super responsive, and overall seems like a great person 🙂

Erik Osterman (Cloud Posse)almost 8 years ago

sweet

Erik Osterman (Cloud Posse)almost 8 years ago

I'm really liking it so far.

Erik Osterman (Cloud Posse)almost 8 years ago

https://github.com/cjbassi/gotop

krogebryalmost 8 years ago

That's some sexy ascii work right there

Erik Osterman (Cloud Posse)almost 8 years ago

Yea, seriously

Erik Osterman (Cloud Posse)almost 8 years ago

https://github.com/aksakalli/gtop

Erik Osterman (Cloud Posse)almost 8 years ago

I want this for kube

fernandoalmost 8 years ago

Hey everyone! I'm a DevOps enthusiast from Chile, looking to learn/improve as a SRE and hopefully contribute as well. Nice to be here, and thanks for the invite @Erik Osterman (Cloud Posse)

Erik Osterman (Cloud Posse)almost 8 years ago

welcome @fernando! thanks for the contributions to our projects

Erik Osterman (Cloud Posse)almost 8 years ago

I'm here to unblock you, so let me know how we can help.

Erik Osterman (Cloud Posse)almost 8 years ago

Moving to #terraform

Maarten van der Hoefalmost 8 years ago

Hi Fellas, I'm in the process of discovery / audit with a new customer. 12factor is a great reference here, but I'm wondering if there are other reference materials which can be used to audit.

June 2018 Browse by date August 2018