azure

Being employed keeps me out of trouble. Keep me employed

“This is the beginning of the end,” Yoo said last week. “It’s already just a midsize business in San Antonio. This is not a company that’s on a trajectory of growth. They’re on a trajectory of death. It will not be around.”

Source: Rackspace ‘on trajectory of death,’ founder Richard Yoo says

I work at a small datacenter. We’re… having some issues with customer retention and customer acquisition cos everyone wants that cloud hotness, even if they’re going to pay through the nose for it. What are we to do??? If Rackspace, one of the first names you think of when you need colocation, what is a small datacenter business in Minnesota to do?

A lot of people keep saying to avoid the cloud and whatnot, but then they end up going with aws, google cloud, or azure. That’s not putting your money where your mouth is.

If they get hacked, you get hacked. This is proven. All of these platforms, in their efforts to make it easy to get onboarded make it super easy for you to shoot yourself in the foot with insecure defaults.

Right now they’re making money, sure… But what happens when they don’t? Looking at you, google. But the others aren’t that much better. Do your part and support small and local businesses that can, and will, lend you their expertise.

Being employed keeps me out of trouble. Keep me employed Read More »

Locked out? Good luck

Let’s build and configure a minimal SSH bastion host (jump box) from scratch, using Ubuntu 20.04 LTS.

Source: DIY SSH Bastion Host

This is all well and good except for the bit where the author is clearly invested in using the cloud (i.e. other people’s computers) to run your own infrastructure.

What happens when google locks you out? Or when amazon decides to do the same. Same concern goes for Azure, or any other cloud provider.

Good luck fixing any of that without having to tear down a lot of your own work just to be able to be useful again. I get it, from a developer point of view setting it like this means it’s easy to plug into projects, but from a sysadmin point of view it means you’re going to shoot yourself in the foot sooner rather than later, specially if you missed a little onfiguration detail that lets your server wide open for takeover.

Locked out? Good luck Read More »