thomrstrom, 3 days ago to infosec

👋 My last #introduction was in 2022, so here's an update:

• Head of Security at #Chainguard
• Keenly interested in #InfoSec and #ReliabilityEngineering
• 30 years of experience messing with the Internet & UNIX systems
• I build my own #bicycle frames & spend more time tinkering than riding
• Spend my idle time playing #guitar and wandering on 2-wheel EVs
• Live in #Carrboro NC with my wife & kids
• Contributed to 250+ #OpenSource projects including 100+ I've created - bincapz is my latest.

wyri, 26 days ago to random

Great, really should have a look at #chainguard based #Docker images: JavaScript Actions in Alpine containers are only supported on x64 Linux runners. Detected Linux Arm64

thomrstrom, 6 months ago to programming

I don't normally shill for my employer here, but it's big news: https://www.wsj.com/articles/chainguard-an-open-source-security-firm-raises-61-million-a4a940da

It's been a rocket ship adventure, for sure. We tried a few things, but It turns out that 0-vulnerability open-source container images are a big deal.

Somehow in 2023, we are still at the point where projects like #NodeJS, #nginx & #PHP publish container images with hundreds of CVEs. We minimize, harden, and remove vulns from these images, and our customers love it.

Want 0 #CVE images? Choose #Chainguard.

mike, 11 months ago to random

I took a dive into #Vitess today, the "secret sauce" from YouTube (and Planetscale) for crazy database scaling.

Honestly it does look really good, nicer than Galera, but they really need better documentation and examples for everyone that doesn't use Kubernetes. 😡

So for now I don't think I'm going to use it. That said, I think I will switch to Percona from MariaDB, to save myself the migration pain later.