Sure! Imagine you’re going on a camping trip and you need to pack some things in a bag. Docker is like the bag – it’s a tool that helps you pack your things (which in this case are your computer programs) and keep them organized.

Kubernetes, on the other hand, is like the campsite manager. When you arrive at the campsite, the manager helps you find a spot to set up your tent, makes sure you have access to electricity and water, and helps you connect with other campers if you need to.

Similarly, Kubernetes is a tool that helps you manage and orchestrate your Docker containers (which are the equivalent of the things you packed in your bag). It helps you deploy, scale, and manage your containers, and ensures that they run smoothly and efficiently.

In other words, Docker is a tool for packaging and managing individual programs (or “containers”), while Kubernetes is a tool for managing and coordinating multiple containers across a network of computers.

Brilliant. Not that I wasn’t clear about the differences between the two, but this definitely puts a more clear picture in front of me, explaining the differences.

Out of curiosity about whether the ChatGPT would provide a different answer to me, I put in the exact same question to my chat with the new AI. Here is what I got.

Okay, imagine you want to make a cake. Docker is like the recipe for the cake, it tells you all the ingredients you need and the steps to follow to bake the cake.

Now, let’s say you want to make 100 cakes. You could make them one at a time following the recipe, but that would take a really long time. Instead, you could use Kubernetes. Kubernetes is like the chef who manages many cooks to make the cakes faster.

With Kubernetes, you can tell it how many cakes you want to make and it will manage all the cooks (Docker containers) to make them for you. It will make sure that each cook has all the ingredients they need and that they are following the recipe correctly.

So in summary, Docker is a tool that helps you create and package software, like a recipe for a cake. Kubernetes is a tool that helps you manage and orchestrate many Docker containers to run your software, like a chef who manages many cooks to make many cakes.

That’s even better.

Regardless, each answer is better than what I got from Google, even though it provides a more official answer with a lot more academic terminologies.

With the emergence of context-based ChatGPT, my approach to problem-solving, and researching sure has shifted quite a bit.

We have a service running on a Linux VM, using open-source software. It works. Got a request from the marketing department to migrate the service to a paid hosted version that they used at a previous job. OK. No problem. After you create the account with the paid service you’re going to want to add my team as admin users so we can support it. You’re also going to want to add the accounting department as billing users so they can set up the payment portion, otherwise you’re going to have to submit an expense every month.

Their response? “We’ll just keep using the one you built us.”

Quite deliberate.

And here is the origin of the term, by Dilbert.

Here is a piece of free advice from Fabian Wosar (@fwosar), CTO of Emisoft.

Click the link to see the whole thread. Or read along here.

Here is free advice for all the ransomware threat actors out there: Do not obfuscate your decryption tools. Contrary to what you think, victims who paid the ransom will not blindly run the tool they got from you.

Most victims will hand the tool they got from you to their DFIR contractor or a company like us to ensure the utility is safe to use and free of backdoors. We even provide that particular service for free to victims.

Only after the decryptor has been cleared can it be used by the victim to recover their data. So even though most obfuscators are trivial to reverse, the usage of any obfuscation raises red flags and delays the vetting process.

The only reasons you may want to hide your code behind obfuscation are either you are ashamed of how bad your code is (which most of you should be, honestly), or you think it would compromise your ransomware's security.

However, the security of proper cryptography does not depend on its implementation being kept secret. Instead, it solely depends on the keys involved being kept secret.

You like to see your victims as your "clients" or your "customers". Unfortunately, obfuscating the decryptor tool is nothing short of bad "customer service". So just drop it.

Originally tweeted by Fabian Wosar (@fwosar) on August 4, 2021.

Over time, I have been using OneNote as my main note-taking and documentation tool. But lately, I am obsessed with Wiki-based systems. Tiddlywiki is my go-to system when I need more formal documentation on anything. I still use OneNote during the process but will transfer the final settings or note to TiddlyWiki as a more final version.

TiddlyWiki is a unique non-linear notebook for documenting complicated information. It’s basically a single HTML file that can also be encrypted with a complex password. It’s great for sharing as you won’t be able to directly make changes to it. In order to update, you will need some sort of saving mechanism to be in place. For example, I am mostly on Windows and I use TiddlyDesktop, an open-source tool designed for Windows.

There are also many other good ones out there that is worth noting, such as

• Confluence – a wildly used paid solution, with a free-tier that might be suitable for a small team.
• Wiki.js – a free open-source wiki system.
• Nextcloud – a self-hosted productivity platform.
• BookStack – a simple self-hosted, also an open-source platform, great for Markdown pages.

And speaking of Markdown, it’s also extremely popular when writing documentation. Very easy to get familiar with and so seamlessly to convert to other document formats, such as HTML or Word.

=== Common and easy to escape ===

1. The Compulsion to Prove Oneself: demonstrating worth obsessively; tends to hit the best employees, those with enthusiasm who accept responsibility readily.
2. Working Harder: an inability to switch off.

== Recovery alone becomes difficult ===

3) Neglecting Needs: erratic sleeping, eating disrupted, lack of social interaction.

4) Displacement of Conflicts: problems are dismissed; we may feel threatened, panicky, and jittery.

=== Easy recovery with the help of another ===

5) Revision of Values: Values are skewed, friends and family dismissed, hobbies seen as irrelevant. Work is the only focus.

6) Denial of Emerging Problems: intolerance; perceiving collaborators as stupid, lazy, demanding, or undisciplined; social contacts harder; cynicism, aggression; problems are viewed as caused by time pressure and work, not because of life changes.

=== Recovery with the help of another becomes hard ===

7) Withdrawal: social life small or nonexistent, need to feel relief from stress, alcohol/drugs.

8) Odd Behavioral Changes: changes in behavior obvious; friends and family concerned.

=== Easy medical intervention still possible ===

9) Depersonalization: seeing neither self nor others as valuable, and no longer perceive own needs.

10) Inner Emptiness: feeling empty inside and turning to activities such as overeating, sex, alcohol, or drugs to overcome this.

=== Serious medical help needed to recover ==

11) Depression: feeling lost and unsure, exhausted, future feels bleak and dark.

12) Burnout Syndrome: can include total mental and physical collapse

=== Recovery no longer possible ===

13) Death

Please be kinder to yourself and get the help you need before it is too late.

IT is a fun career if you are into computers but it could also be ruthless, easily get burned out. Be mindful, and don’t be trapped in the rabbit hole. Get a hobby that is not computer related and enjoy your life, not just your work but your own life.

There are great templates for this already: The YC application, Amazon’s internal press release, and Sequoia’s Writing a Business Plan. I found myself mixing and tweaking these templates because they don’t exactly match my model of the world, so I wrote up my own list.

I use this list both to develop ideas and filter them. If you adopt it, be careful about using it as a filter. Remember that in the early stages, good ideas are very easy to kill.

A great starting point to validate whether the idea you are formulating in your mind is worth pursuing.

Take this as a skeleton and flesh it out on your own. Take an hour or two and research the things I talk about. Tailor this to your own environment and users. Make it relevant to your people. Include corporate stories, include your audience, exclude yourself.

This ain’t about how smart you are at infosec, and I can’t stress this enough, talk about how people can defendthemselves. Give them things to look for and action they can take. No one gives a shit about your firewall rules.

You can also check the slideshow directly here.

I can’t believe I’ve been using Gmail for almost 15 years. It’s been a long ride and a happy one in overall. I never had to worry about the storage, nor missing emails. With the strong search feature, I can always find what I was looking for in a split second. It helped me write a better subject line so I can find them easier years later. It also keeps my inbox clean with the world-best spam killer and has a way for me to report suspected spam when I saw one. Oh, how can I forget the joy of playing those Gmail Labs? With the new AI-powered features such as Smart Reply and Nudges, I can reply emails a lot quicker with less typing.

So, what’s next:

First off, we’re making Gmail more assistive. You may have already used Smart Compose, an AI-powered feature that helps you write emails quicker.

Next up, you can decide when your email gets delivered to someone else’s inbox. Today, we added a new feature that lets you schedule email to be sent at a more appropriate date or time, which is helpful if you’re working across time zones, or want to avoid interrupting someone’s vacation.

Lastly, you can now take action without leaving your inbox. You can respond to a comment thread in Google Docs, browse hotel recommendations and more, directly within emails. 

The best line:

We may have launched Gmail on April Fools’ Day, but the last 15 years have been no joke. And we’re looking forward to what’s to come.

https://www.blog.google/products/gmail/hitting-send-on-the-next-15-years-of-gmail/

Rather than a terminology or a product widely recognized in tech, it’s a concept that uses open storage technology to build a storage system or product on top of enterprise level of hardware. To build a SAM-SD storage using SAM-SD method, you likely need:

• A dedicated storage server or device
• Enterprise-class hardware, such as DELL, HPE, and SuperMicro
• Enterprise Open Storage software and OS, no proprietary software or closed system.

There are more choices when choosing an open storage software, such as:

• Linux Family [Very Well Suited to Storage in General]
  • OpenSuse: enterprise, free Linux distro with a heavy focus on storage and clustering technologies.
  • Fedora, CentOS: enterprise, free Linux distros with heavy focus on core technology and stability.
  • Ubuntu: enterprise, free Linux distro with high change rate.
• Windows
• Solaris Family
  • Solaris
  • OpenIndiana and derivatives.
• BSD Family
  • FreeBSD
  • Dragonfly

Approaching SAM-SD to build enterprise storage system like NAS and SAN is a lot more fun than buying products out of the box. I will definitely keep eyes on this approach and learn more hands-on skills out of it in the future.

Resources:

• SAM-SD
• What is a SAM-SD
• SAM-SD Hardware Vendors
• Open Storage Operating Systems for SAM-SD
• SAM-SD RSS

Because of it, I haven’t been paying close attention to other Password Manager products, especially the ones that work in a corporate environment. But reading through this head-to-head evaluation of 6 password managers, which not only offers a breakdown by features but provides some insights on why they ditched LastPass to embrace a black horse called Bitwarden that I only heard its name about a month ago. I will give it a close look in the new year.

The breakdown was written in jsfiddle which is embedded below.

While we are on the topic, let’s also check out this cartoon that walks you through how we think about passwords, and how we should be thinking about them.