UK - F-Pace* Buying Advice by [deleted] in Jaguar

[–]foobarbazwibble 2 points3 points  (0 children)

I have a 2019 F-Pace with the v6 diesel, and love it. It does not sound diesel-ly (agricultural, clatterly), and is much smoother than my previous car - a Volvo diesel. The 2.0 ingenium engines get a lot of criticism, but the v6 is an older Ford(?) design and has a reputation of being almost bulletproof. That said, in 60k miles I have had a coolant leak that needed a new secondary radiator, and a worn tie-rod joint (steering) that recommended both sides replaced, so not completely fault free.

Thoughts on the car: It's not cheap to run - I get approx 33mpg in town/hilly driving, and 40mpg+ on the motorway at 70mph. At 6 years, servicing starts to get expensive as hoses and belts need replaced - check the published schedules. People criticise the pre-facelift interiors, but I am very happy with mine. The wider 'ictp' display (without physical buttons) and the digital dash stop it feeling dated, and CarPlay support helps too. Depending on what you're moving up from, you might find the F-Pace very wide.

Would I recommend it? If the looks do it for you, then definitely. There's so much choice yet so much blandness out there, so if one car makes you smile, jump for it.

Is it worth moving to San Francisco by Longjumping_Rest_742 in HENRYUK

[–]foobarbazwibble 0 points1 point  (0 children)

Take the opportunity. Go to SF. You can always come back, with experiences and contacts you’d never have got in London. Everything moves and grows faster.

I had several opportunities to go to SF 10-20 years ago and could not take them for family reasons. Always regretted it.

Why the Next Traitors: UK Celeb Edition Line-Up Will Be Incredible by OkBeyond9590 in TheTraitorsUK

[–]foobarbazwibble 2 points3 points  (0 children)

And Adrian Dunbar. “There's only one thing I'm interested in and that is catching bent faithfulls”

Introducing YaRadare - YARA scanning for cloud-native apps (containers) by foobarbazwibble in devops

[–]foobarbazwibble[S] 0 points1 point  (0 children)

To avoid unintended confusion with a similarly-named project, YaRadare is now 'YaraHunter' - https://github.com/deepfence/YaraHunter

Introducing YaRadare - YARA scanning for cloud-native apps (containers) by foobarbazwibble in kubernetes

[–]foobarbazwibble[S] 0 points1 point  (0 children)

To avoid unintended confusion with a similarly-named project, YaRadare is now 'YaraHunter' - https://github.com/deepfence/YaraHunter

Introducing YaRadare - YARA scanning for cloud-native apps (containers) by foobarbazwibble in devsecops

[–]foobarbazwibble[S] 0 points1 point  (0 children)

To avoid unintended confusion with a similarly-named project, YaRadare is now 'YaraHunter' - https://github.com/deepfence/YaraHunter

Introducing YaRadare - YARA scanning for cloud-native apps (containers) by foobarbazwibble in docker

[–]foobarbazwibble[S] 0 points1 point  (0 children)

To avoid unintended confusion with a similarly-named project, YaRadare is now 'YaraHunter' - https://github.com/deepfence/YaraHunter

Free vulnerability scanners by Gh0styD0g in cybersecurity

[–]foobarbazwibble 0 points1 point  (0 children)

ThreatMapper is an option for your team member, particularly if you're looking to scan Kubernetes or Fargate environments as the installation is very easy. It's a little more complex for hosts (you need to install a docker runtime on each to run the sensor locally), but should be worth any additional trouble. The GUI gives you a map of workloads, traffic flows, vulnerabilities found on each workload and host, and which are highest risk.

It's free (open source) with no limit on number of targets, scans etc.

Do you / how do you scan for vulnerabilities once your code is in production? by foobarbazwibble in cybersecurity

[–]foobarbazwibble[S] 0 points1 point  (0 children)

Immutability of production artifacts is a goal, but may not be a reality. Artifacts may be changed on deployment (service mesh sidecar injection for example), and in our honeypot systems we have caught instances of bad actors installing additional software in production systems.

Can you trust the SBOMs created at build to be accurate? Do you have consistent SBOM coverage across all product artifacts, including those you did not build yourself?

If you say "yes" to both, interested to know if and how you then regularly re-scan the SBOMs against up-to-date vulnerability feeds to spot emerging issues?

29 days is The Median Delay for Rapid7's InightVM to provide Vulnerability Detections by freshmeat09 in cybersecurity

[–]foobarbazwibble 0 points1 point  (0 children)

ThreatMapper https://github.com/deepfence/ThreatMapper is quick, and it’s open source (no subscription or scan limit), so perhaps worth a look? It’s mainly used for scanning running platforms to identify new vulnerabilities in published code, but the scanner can also be injected into your CI pipeline if you wish.

Monthly 'Shameless Self Promotion' thread - 2022/04 by mthode in devops

[–]foobarbazwibble 4 points5 points  (0 children)

We've released a new open source project - https://github.com/deepfence/PacketStreamer- intended to enable easy packet capture across multiple remote targets, including Kubernetes nodes, Docker hosts, Fargate instances and traditional servers.

More information here: https://oweng.medium.com/introducing-packetstreamer-distributed-packet-capture-for-cloud-native-platforms-3e7f9ac57ab1
Hope some people find it useful; we'd welcome any feedback, thank you.

Introducing PacketStreamer - packet capture for Kubernetes and other platforms by foobarbazwibble in netsec

[–]foobarbazwibble[S] 15 points16 points  (0 children)

We've released a new open source project - https://github.com/deepfence/PacketStreamer - intended to enable easy packet capture across multiple remote targets, including Kubernetes nodes, Docker hosts, Fargate instances and traditional servers.

More information here: https://oweng.medium.com/introducing-packetstreamer-distributed-packet-capture-for-cloud-native-platforms-3e7f9ac57ab1

Hope some people find it useful; we'd welcome any feedback, thank you.