Smart speaker bearing witness in murder trial
In 2017 an Amazon Alexa ‘testified‘ in a murder trial in Arkansas, and is now scheduled to do so in New Hampshire (a double murder!). No word on Siri, Bixby, “OK Google” and their kin. Now, obviously big tech would prefer to keep mum on what they are recording around your house, and a subpoena…
Today’s adventure: the Chevy Bolt gets a double dashcam
This turned out really well. You can’t see a single wire anywhere. Ingredients. 1 generic ‘Car Dash Camera’. Its so generic there is not a model number anywhere on it or the packaging. Nothing. I got it from Aliexpress here. It was described as ” WiFi Car DVRs Recorder Dash Cam Dual Lens Vehicle Rear…
The agony and the ecstasy of the read-only
So earlier today I counselled to run your container filesystem read-only. Its higher security (something can’t weasel in as easily) You want to be able to dynamically dispose and restart containers somewhere else, how can you do this if they are stateful The overlay fileystem is not hgh performance Now, this last one. Lets say…
Have you set your security context recently?
You’d be shocked at how few people copy these few lines into their YAML in Kubernetes. Highly recommend you do this. Why? Well, lets walk through them. runAsNonRoot: self explanatory. Why would you want root permission inside this container? What possible good could come of that? is it because you need to bind to <…
PSA: launcher.gcr.io is not being maintained
So you might have cut and paste some code from somewhere, maybe an ‘from launcher.gcr.io/debian9’ kind of thing. That’s a good upstream, right? They are maintaining it with a strong CI? When suddenly you read Hmm. Double whammy. You have been relying since 2018-07-18 on something which is not being updated (and daily rebuilding your…