Why We Decided to Address This At some point while reviewing our endpoint security posture, we realized that BIOS protection was one of those areas we tend to take for granted rather than actually verify. This was the situation we encountered: • No BIOS password configured• Unrestricted access to BIOS settings• External boot still enabled…
Read MoreWe’re developing a software product whose production environments run entirely on AWS. Keeping local development as close as possible to those environments is important to us: It reduces surprises when deploying, shortens the feedback loop when debugging infrastructure-related issues, and means developers can work confidently without needing access to a shared cloud account. To achieve…
Read MoreFor a long time, software development has had a fairly comforting structure: You had a problem, you wrote some code, you shipped it, and then you moved on to the next problem while quietly pretending the previous one wouldn’t come back to haunt you at all. Mission accomplished. That model is starting to break, not…
Read MoreFor a long time, Sealed Secrets was our go-to solution for managing confidential data like database credentials, tokens and private keys within Kubernetes. However, as our operations grew, the operational overhead of this approach led us to migrate to External Secrets. This transition has significantly streamlined our workflow, enhanced our security posture during credential rotations,…
Read MoreConfluence Cloud does not provide a simple native view that lists all spaces with direct links that’s in a format business users can easily consume. The REST API gives you the data, but you still need to filter, paginate, and present it. A practical workaround is to collect all spaces through the v2 Spaces endpoint,…
Read MoreBy now we know how to use a teleprompter from the point of view of a content creator in front of the camera. But remember, that’s not all we do in our world of limited resources. We’re also the audio engineer, cameraman, lighting director, and so many other roles. So today instead I want to…
Read MoreIn a previous post, I wrote about the challenges of building a public GitHub organization correctly: The need for structure, consistency, and enforcement rather than relying on memory. What I didn’t cover was how we actually solved it. The short answer: We treat the organization as infrastructure. Repositories, teams, branch protection rules, labels, permissions, all…
Read MoreSOAR for Controlled Response SOAR is often described in broad terms: orchestration, automation, response, integration. That’s true, but it can also feel vague. A simpler way to explain it is this: SOAR helps a SOC turn a decision into action without repeating the same manual steps every time. This matters most when the action is…
Read MoreWelcome back to our continuing series on budget-friendly methods for making video tutorials. With today’s post I’m going to start a 3-parter on Teleprompters. I’ve previously described Teleprompter hardware and setup, but today I want to talk more about usage recommendations now that I’ve been using one for several years. Also remember that a teleprompter…
Read MoreMost technical blog posts focus on frameworks, architectures, or specific implementation patterns. That makes sense, as those are the things we usually like to discuss, measure, and refine. But a lot of day-to-day efficiency doesn’t come from the headline technology. It comes from the smaller utilities and extensions that quietly keep our work moving along….
Read MoreI recently faced a challenge that many large organizations run into when scaling their use of Atlassian Confluence. I needed to create an automation that would automatically change the page status under specific conditions – for every page created or updated across more than 600 spaces. The Problem Out of the box, Confluence provides a…
Read MoreCreating a GitHub organization is easy. Creating a public one that is actually well-structured, secure, and maintainable over time… not so much. At the beginning, it feels like a simple task: create the org, push some repositories, maybe define a couple of teams, and you’re done. But as soon as things become public, the whole…
Read MoreTL;DR The Challenge LinkedIn is my single source of truth for professional experience. Every new role, certification, or skill update goes there first. A person’s CV should reflect those changes automatically – not weeks later when he or she remembers to manually copy information across formats and through different portals. The idea was simple: build…
Read MoreBecause “it works on my machine” is not an observability strategy. How It Started As an observability engineer, my workflow when starting a new project is pretty consistent: find the OpenTelemetry SDK for the language or framework in use, understand its quirks and limitations, and build from there. So when I picked up a Flutter…
Read MoreWelcome to part 20 in our series on creating effective tutorial-style videos on a budget. Today: Screencasts! Let’s start off with just our basic assumptions: There’s nothing wrong with the informal style, but it takes experience and skill to pull off well, while the style presented here can be done even by beginners, because it…
Read More