rapphil

Hi

I could not find any definitive material about this topic, but when is it safe to use weak random number generators?

I would say:

  * Generating random passwords - no
  * Generating salt - no
  * Jitter in a Retry Strategy - yes

Anything else?

What rules can we apply here?

Security is a quality that is hard to measure in my opinion. Is using good standards and industry standard tools enough to prevent bad actors to exploit your system? Oauth2, hashed and salted passwords....

Are there any certifications that big companies care about?

I love Hashicorp products/tools. They are simple and intuitive to use/configure and they do one thing very well. I love the fact that each product is usually a single binary that is the client/server and command line tool. What change are the parameters passed to the binary when executing it.

I have experience with Consul, Vault and Nomad.

Due to security and performance reasons, we need to have most of our services hosted on premises.

I've been using a on-premise Nomad deployment in a bunch of greenfield projects and so far I'm very satisfied on how well it integrates with Consul/Fabio/Vault and how simple is to operate the cluster.

We are not using any fancy feature and we are basically using Nomad to decouple the Software from the hardware where the Software runs. The deployment times are faster than using ansible and we can leave the scheduler to decide where the software should be deployed. Nomad also supports scheduling of raw commands.

Lastly, Nomad, when integrated with Consul/Fabio works in a multi-datacenter/multi-site topology out of box. This is specially important for us.

However due to the buzz around Kubernetes I'm afraid of making the wrong choice in the long term and invest time in something that will eventually die or become irrelevant. There is also much more information available about Kubernetes than Nomad.

On the other hand, I fell that Kubernetes is a bit more complex to operate/maintain than Nomad. I might be wrong.

My questions would be:

- If you have a on-premises Kubernetes deployment, is there a lot of overhead in operating it? Can you tell me a little bit about some specific situations where the cluster required manual intervention?

- Do you use Kubernetes in a multi-data center/multi-site configuration? Any thoughts on that?

- Do you use Nomad, used in the past? What works/worked and what doesn't/didn't?

- Is it still relevant?

- How is the adoption of GraphQL compared to REST APIs?

- What popular services are providing a GraphQL endpoint?

- When would you use It aside from the cases you want to optimize the access to your service (mobile)?

- Are you using in your projects? What work, and what doesn't work?

Where can I find information about video codecs, containers?

The basics, existing standards and properties and comparison of different codecs and file formats.