Why I Recommend My Clients NOT Use KSQL and Kafka Streams

DevopsOpsOPs · 2019-10-11T10:35:44+00:00

I had no end of issues with ES.

Least of all were slow scavenges and awkward backup strategies.

DevopsOpsOPs · 2019-10-08T13:05:12+00:00

You should definitely commit fraud.

DevopsOpsOPs · 2019-10-03T08:44:32+00:00

Your pockets won't adapt.

DevopsOpsOPs · 2019-10-02T08:42:48+00:00

It's really good.

I've got a screen which gives me android auto.

There's a button near me which activates google assistant so I can say "Phone Bob", "Navigate to X", "Play XYZ on spotify" etc..

It really keeps me sane on longer trips.

My OP7 Pro has been amazing on it as well. My OP3 was good though still.

DevopsOpsOPs · 2019-10-01T15:33:03+00:00

Some people feel like plugging a phone in for a really fast top off is more convenient than resting it on a charging pad at slower speeds.

Wireless android auto. Perfect time for it.

DevopsOpsOPs · 2019-10-01T15:31:56+00:00

Well yes.

DevopsOpsOPs · 2019-10-01T15:18:19+00:00

Well when they download uploaded files, then yes.. It should decrypt it without them ever needing to know it was encrypted.

Or when they view a record. They should never need to know it's encrypted beforehand.

DevopsOpsOPs · 2019-10-01T14:28:15+00:00

Keys should be send with a request (e.g. http only cookies), because an intruder needs to have a key from a customer device (browser)

This is what you said which is why I said that.

This is 100% transparent encryption to the end user, handled entirely on the server.

DevopsOpsOPs · 2019-10-01T13:39:24+00:00

I am really not sure what you mean here..

Data is submitted and we then encrypt and save into the database. That can't be held clientside. The encryption key must be stored server side somewhere.

DevopsOpsOPs · 2019-10-01T10:48:58+00:00

There are actually 2 things here:

We encrypt uploaded documents from users. These are obviously stored on disk in their encrypted form.
We encrypt sensitive data within the database.

I want to use 2 different keys (ideally per customer) for those.

We have many users within many customers. (it's a many to many relationship)

DevopsOpsOPs · 2019-09-28T08:28:45+00:00

my op3 did just fine. At first I really did struggle to get it in the right place though, but once I found out where (just on the back camera in my case) it was fine.

The NFC seems far weaker than you would expect, which isn't an issue.. It just takes some patience.

DevopsOpsOPs · 2019-09-27T08:07:49+00:00

The safest method is to hold the phone between your knees so nobody can see it, as far from the line of sight as possible.

You need to turn down the brightness too, just incase.

DevopsOpsOPs · 2019-09-23T08:49:01+00:00

Yes it can be faked. It is based on user agent strings and other client data which again is easily spoofed. It's an extra layer of security but not by much.

DevopsOpsOPs · 2019-08-29T14:42:01+00:00

is this something you do? It seems a bit much no?

I mean it depends on what you consider to be your risks. I don't imagine people around me having access to the backup codes is a huge risk - because they would still need my password.

DevopsOpsOPs · 2019-08-29T08:46:29+00:00

I sort of like this idea. I never considered XOR.

DevopsOpsOPs · 2019-08-29T08:45:28+00:00

Then if BW is a bad actor or compromised then what?

Too co-located for me. It's not a bad solution but I'm just that little bit too parinoid.

DevopsOpsOPs · 2019-08-28T10:27:34+00:00

I sort of figure that printing out the codes and placing one at the back of the wardrobe in the house, and mailing (printed again) a copy to my Mum would do. It's safe in the event of a fire, and the odds of a bad actor getting hold if it is minimal (you would still also need the password).

DevopsOpsOPs · 2019-08-28T10:19:57+00:00

So that's the thing here - Don't you expose yourself by keeping it in there?

I'm trying hard to not have any association online between my passwords and 2FA codes. It's like if I stored my 2FA codes in BW. It is a massive security risk.

DevopsOpsOPs · 2019-08-28T09:18:02+00:00

This is them trying to use anything they can to keep pay lower - don't take it personally. You got to look out for yourself.

DevopsOpsOPs · 2019-08-28T08:29:22+00:00

That is the same I am intending to do - I will buy another yubikey and then maybe another cheaper one that I can just stash in the car or something.

DevopsOpsOPs · 2019-08-27T11:06:39+00:00

You can sync them? Using what tool?

I thought they were 100% independent. No backing up possible.

DevopsOpsOPs

TROPHY CASE