Upgrade Triggers: Mandatory, Locking, Opportunity
A Dependabot PR, an EOL notice and a CVE bulletin share one queue but not one urgency. Sort signals into three types and give each a response time.
All tags
Tag
#security
6 entries: Note, System, Essay, Tool.
-
- Essay 5 sections
The Cost of Installing a Package for Everything
The security, maintenance, and supply-chain cost of adding a dependency for a small function — and when writing it yourself is cheaper
- System 10 sections
Transactional Outbox: Dual-Write, Idempotent Consumers
Closing dual-write with an outbox, suppressing the at-least-once repeats it creates, and encrypting the personal data inside the event.
- System 6 sections
Zero Static Authority in Multi-Cluster GitOps
Multi-cluster GitOps with no long-lived kubeconfig: SPIFFE IDs, SPIRE-issued short-lived SVIDs — the order to build it in, and what each step costs.
- Tool
Password Generator
Cryptographically secure password generator: set the length and character classes, and optionally exclude look-alike and shell characters. Runs in your browser.
- Tool
JWT Decoder
Decodes a JWT header and payload and shows the exp and iat claims as ISO timestamps. It does not verify the signature; the token stays in your browser.