Philip Tongsak

Catching up on some reading. This paper about security operations and cloud speaks to me. I’ve spent 14 years or so in cloud, mostly as a builder. The challenge is real. https://lnkd.in/eE7V3QfM The big take away is that cloud security requires partnership and collaboration between subject matter experts in cloud and the teams building in cloud.

7

How to structure and architect a company ...

9

2 Comments

Are you looking to take your email operations to the next level? Our team at Amazon SES is rolling out exciting API enhancements that you’ll want to hear about. These include configurability upgrades like the ability to set custom maximum delivery times, as well as new security features like HTTPS support for email open and click tracking. Join our upcoming webinar on November 6th, where our Amazon SES experts will dive deep into how you can leverage these powerful capabilities. Don’t miss out - register now to secure your spot: https://lnkd.in/g6g3b8RV #AWS #AmazonSES #EmailMarketing #WebinarAlert #DeliverabilityOptimization

28

1 Comment

Santana Row shopping center in San Jose has implemented a ticketless parking system that eliminates the need for drivers to take a ticket upon entry and pay at a pay station upon exit. Instead, drivers can simply scan a QR code (see photo) posted throughout the garage using their phones, enter their license plate number and credit card information on the website that pops up, and a camera will read their license plate and open the gate as they exit. While this system may seem convenient and efficient, I think there is a significant security concern! There is a risk that perpetrators could replace the posted QR code with their own, which would redirect drivers to a fake website where they would unknowingly enter their credit card information. This could lead to unauthorized charges and potential identity theft. It is crucial for the shopping center to address this security concern by taking appropriate measures to protect drivers' personal and financial information. They must ensure that the QR codes posted are authentic and that there are no vulnerabilities that could allow perpetrators to manipulate the system. As an alternative solution, pay stations could be installed for shoppers to use instead of relying on their own phones.

32

12 Comments

If you're running mission critical software in kernel space on your clients' machines, which updates itself remotely and can brick those servers, how can you not do health mediated, staged rollouts of remote updates? Seriously, why should we believe you're competent in other, much more complex aspects of your software? https://lnkd.in/gaEcQ4fh

29

3 Comments

So what are your thoughts on the future of flying pigs and their effect on the tech industry?

3

2 Comments

There's so much that we can do together; I know at least a half-dozen open source companies all working in different parts of this space.  It's incumbent on all of us to help explain how the parts fit together into a whole, and to explain what that whole can do.

7

📣 Breaking news from Black Hat! Announcing that Securonix and Cribl have formed a strategic partnership to enhance threat detection against AI-powered threats through expanded data ingestion capabilities. This collaboration empowers organizations to leverage Cribl to ingest a broader range of data into Securonix’s leading SIEM for superior defense. Key Highlights: 🛡️ Enhanced Threat Detection: Efficient delivery of security-relevant data from various sources into Securonix's advanced analytics ⛓️ Seamless Integration: Securonix EON's Cybersecurity Mesh Architecture allows for flexible, interoperable data management 👉🏼 Flexibility and Choice: Leverage Cribl Stream's observability pipeline with Securonix’s security analytics for robust data enrichment and alert correlation "As companies face a widening array of AI-based cyber threats, they've also been overwhelmed with the proliferation of data. Partnering with Cribl enables Securonix products to ingest a wider range of enterprise data and strengthens our mutual customers’ cybersecurity posture to reduce risk." - Scott Sampson, CRO at Securonix Read the press release here: https://lnkd.in/gYbrGvRg #Cybersecurity #DataManagement #AIThreats #GenAI #AI #CyberMesh #SOC #SIEM #CyberOps #Partners

1

I understand that some features we build will be very large and require a lot of time and effort to maintain and keep running at the quality we expect. This is normal. I understand that some vendors actually do some things really well and we may have to pay a lot of money for their services since what they provide is so valuable. This is normal. But to pay someone a lot of money for their services, and also spend a lot of time keeping it working, is the fastest way to get on my cut list; somehow for many this has become normal and it shouldn't be.

28

6 Comments

Minecraft seems to roll through my house in waves. We're at another crest and my son asked me about running a server. This time around I'm turning it into a better learning exercise than the last time (8 years ago? He was pretty little still.) We started by getting him to run one on the local windows machine he has. We opened it to friends by setting up port forwarding and sharing our public IP. Not very stable, but it worked. Next he asked about paying for better hosting and I said... let's do something better, but free. I gave him an account on one of my machines and we've been working through having him set it up as a service there. He's learned about ssh keys to securely login to a dedicated account, package management (Debian 12) to get a java environment, how to use tmux to ensure logging out doesn't kill the server process, git to manage the server.properties file and other config, systemd to setup a service so we run without logging in after boot, basic scripting for start and stop, downloading and building a c program for remote control of the server process, process management basics, shell basics, vi basics, etc. He's covered a lot of ground with incremental "homework" steps each night to advance the project. A great learning experience all driven from something he was invested in. (I setup a proper dynamically managed DNS name so he's not at the whim of our dynamic IP address as well.) Minecraft is amazing in more ways than just what the game itself offers.

143

18 Comments

Day 1 of #HashiConf 2024 where the tracks will focus on infrastructure Lifecycle Management and specifically HashiCorp products that deal with infrastructure (such as Terraform). Tomorrow's tracks will cover security lifecycle management.

8

At Sprout Social, Inc., we used our own tool to improve our customer support strategy. The TLDR: Using our Inbox Activity Report, Sprout decreased our average social media response time by 55%. That’s huge.  Sprout’s Smart Inbox is one of the most popular aspects, and this video sums up why.   See how social can be the missing link to business success and impact:  https://bit.ly/4b63vxk

9

Curious about what it's like to work at GoDaddy? Check out the GoDaddy Life Blog! Hear from our employees as they share their career journeys, detail projects, and elaborate on what makes what makes the #GoDaddyLife unique. https://lnkd.in/eGC5DHkB #YouBelongHere #WorkLifeBalance #Culture #PeopleFirst

19

If you're going to be at #AWSSummitBerlin this week, stop by and meet Sumo Logic and check out our very own AJ Bean, who will explore cloud threat detection challenges and how to leverage a single source of truth with logs. #DevSecOps.

2