#security - January 2020

This is pretty scary. With the ability to overwrite DNS settings remotely, an attacker can easily setup phishing sites on any domain they choose.

Yeah that's really bad

There an equivalent to something like teleport for ssh / kubectl access, but for access to SQL servers like Postgres and MySql?

That would be cool, but not really

Phpmyadmin doesn’t count :-)

(Ironically phone autocorrects that to “phony admin”)

If a web ui was what the interested parties needed, you could secure that up internally, put it behind SSO, etc. Was more hoping for a dynamic/audited tunnel for PSQL or other tools

(via digital ocean)

Not sure if I should ask this here or in #terraform . Does anyone have experience with https://github.com/eerkunt/terraform-compliance? I'm curious if Sentinel is the only available way to check Terraform code for compliance with security rules.

@Joe Presley similar discussion came up recently

let me find it.

Thank you

see the conversation surrounding this post

Thanks for the heads up. That was one of the solutions the client pointed me to.

Also, if you check out last week's "office hours" we talk a little bit about using the Open Policy Agent with terraform

also @marcinw has a SaaS product that implements OPA

@marcinw has joined the channel

Awesome. Thanks a lot. That's a huge help.

Scary a.f.

Makes you wonder what the isolation mechanism is at Azure for faas.
Shows how important firecracker, gvisor, and others are... And that cold start isn't going away because we need these things and these things take time to start.