Announcing Prometheus 3.0 (6 minute read)
The Prometheus Team has announced the release of Prometheus 3.0, a major update featuring a new user interface, UTF-8 support, Remote Write 2.0, OTLP support, native histograms, and some breaking changes.
|
Cloud Native Computing Foundation Announces Dapr Graduation (4 minute read)
The CNCF has announced the graduation of Dapr, a runtime that simplifies the development of resilient distributed applications, enhancing developer productivity by 20-40%. Dapr's extensive API support enables seamless cloud and edge deployments, making it a preferred tool for building secure and scalable microservice architectures.
|
Cloud Native Computing Foundation Announces cert-manager Graduation (5 minute read)
The CNCF has announced the graduation of cert-manager, an open-source project that automates TLS and mTLS certificate management to enhance cloud-native security. Cert-manager, widely used in Kubernetes environments, has reached a major milestone with over 500 million downloads monthly, demonstrating its critical role in simplifying certificate lifecycle management for secure cloud communications.
|
|
We're (finally!) going to the cloud! (6 minute read)
Stack Overflow is migrating its data centers to the cloud due to the closure of its New York data center, aging hardware, and maintenance distractions. The transition will provide flexibility, scalability, and improved development workflows but at a higher cost. Stack Overflow is taking an incremental approach to reduce risk, beginning with simpler applications and gradually moving all platforms, with a focus on leveraging Kubernetes and automated infrastructure management.
|
|
Leonidas (GitHub Repo)
Leonidas is a comprehensive framework designed for simulating attacker actions in the cloud. It uses a YAML-based format to define attacker tactics, techniques, and detection properties. Leonidas includes tools for API deployment and Sigma rule generation. Detailed documentation is available.
|
CloudBrute (GitHub Repo)
CloudBrute is a versatile, cross-platform tool designed for bug bounty hunters, red teamers, and penetration testers to efficiently uncover a company's cloud infrastructure, files, and apps across major providers like Amazon, Google, and Microsoft, with features such as concurrency, proxy and user-agent randomization, and support for all major cloud platforms.
|
|
Etsy's Service Platform on Cloud Run cuts deployment time from days to under an hour (5 minute read)
Etsy migrated its infrastructure to Google Cloud and developed the Etsy Service Platform (ESP) on Cloud Run to streamline service development and deployment, reducing deployment times from days to under an hour. By leveraging Cloud Run and other Google Cloud services, Etsy successfully improved developer experience, scalability, and operational efficiency while overcoming challenges through continuous feedback and iteration.
|
Fault Injection - Down the Rabbit Hole (24 minute read)
This series of articles explores fault injection attack techniques to assess their potential by pushing the boundaries of their applicability using affordable hardware. It offers insights to demystify the underestimated and often misunderstood glitch phenomena in chip security.
|
|
Love TLDR? Tell your friends and get rewards!
|
Share your referral link below with friends to get free TLDR swag!
|
|
Track your referrals here.
|
Want to advertise in TLDR? 📰
|
If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.
If you have any comments or feedback, just respond to this email!
Thanks for reading,
Kunal Desai & Martin Hauskrecht
|
|
|
|