Hacker News Reader

Glad to hear you've come around on zero trust! How did you apply zero trust to the webapp you mentioned, if I may ask?

CKMoon Unpacking the Benefits of Zero Trust Architecture as Defined by NIST

That's one of the ways I like to think about it. When you have zero trust, you can comfortably expose any app to the internet.

If you can't comfortably expose your app to the internet, you probably don't have zero trust.

The problem is, "exposed to the internet" is pretty much how most things are today, in a world where everything is trying to be "smart." There is a pathway to most assets and resources and that's what causes breaches. So all services and resources should be assumed as "exposed" until proven otherwise, therefore all infrastructure (and development) should apply zero trust principles.

CKMoon Unpacking the Benefits of Zero Trust Architecture as Defined by NIST

https://www.pomerium.com/comparisons/tailscale-with-pomerium...

The tools do different things. Pomerium plays well with Tailscale.

CKMoon Unpacking the Benefits of Zero Trust Architecture as Defined by NIST

It is indeed a continuous process, like devops!

CKMoon Biden’s New Cyber Strategy Will Acknowledge: Market Forces Aren’t Enough

Title shortened due to character limits

CKMoon Zero Trust Strategy and Roadmap

I was reading it and going "Are...are you allowed to publicly admit this?"

It's a wild time, I'm telling you

CKMoon Sound

Incredible! Approachable and fun to learn.

All education should aim for this bar

CKMoon Children's Guide to Zero Trust Access

It appears quite a few people want a hardcopy to read to their children...or board members.

CKMoon Ask HN: What game do you wish existed?

I have not! I will check it out.

It's actually mildly inspired by Savage 2 from S2Games which I think was just ahead of their time.

I have some ideas on how to seed it with players to avoid the Spellbreak fiasco but that would be part of how I design it and I don't want to write all my ideas out in the wild :)

CKMoon Ask HN: What game do you wish existed?

I want an asymmetrical game of 3rd-person top-down strategy vs FPS battle royale.

Basically one player is playing starcraft against 99 players trying to reach the middle of an island. The 99 players are playing first person survival battle royale - their goal is to beat the other players to the middle of the island where there's a throne to ascend and win the game.

The player playing as God gets to bring in environmental spells into the game and can direct a roving band of animals. The God player's goal is to prevent the 99 players from reaching the middle but can only do so in very specific ways that basically come down to herding players together and hoping they fight or dropping supply drops somewhere on the map where players are encouraged to fight over the drop.

There would be a limited amount of servers that players can fight over to become the next "God" of the island. Expanded features would allow players to design their island, yadda yadda.

I've basically been designing it slowly for if I can ever pitch it.

CKMoon I made an AI write a story about AI then I made another AI illustrate it

>I’m not afraid of Artificial Intelligence anymore, because I know that they can be just as good of friends as anyone else.

This is pretty sus coming from an AI lol

CKMoon Tech stocks wipeout: Engineer's $400K comp is now $180K

Factor in inflation and buying power is even worse!

CKMoon Ask HN: Would You Pay for Privacy?

To clarify, your app isn't designed to fix the issue of privacy (which would be a wild project), but you're effectively offering an app for free so long as you can collect data on users, while giving them the option to pay while you pinky promise to not collect data on your paying users and their behavior?

At first glance, this seems like a very difficult business model to scale, as if it works as described you would be denying yourself insight into what makes a user pay and their behaviors.

CKMoon Solar panels being installed over canals in India

This genuinely seems like a good idea, though I wonder if the shade might contribute to other undesirable things (like breeding grounds for mosquitos?)

CKMoon Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard

This is a good step forward, I just hope they work on ensuring the end user experience for less technical people doesn't seem more complicated than passwords.

It's a work in progress.

CKMoon Ask HN: How do you securely self-host a server?

Depending on what you're interested in, try this out!

https://discuss.pomerium.com/t/this-little-nas-that-could/80

CKMoon The new White House memo on zero trust is a strong signal

The best part of this memo is now you can use the memo's standards instead of the vendor's "stated" standards. And these standards are bleeding edge - very few products will actually pass muster.

CKMoon Pomerium v0.16 Is Live

Pomerium is announcing the v0.16 release! This is a big release, and includes several new features:

- Kubernetes Ingress Controller: You can now dynamically provision routes from Ingress resources and set policy based on annotations for Kubernetes workflows.

- Desktop App: Power users that need TCP-based services now have an easy-to-use VPN alternative. We’ve created a desktop application to support secure access to non-web traffic protocols such as RDP, SSH, MySQL, Postgres, REDIS, and more!

- Device Identity: One of the core tenants of zero trust is to leverage device identity into policy decisions. Pomerium uses the open standard WebAuthn to bring device-aware policy evaluation into access decisions.

- Pomerium Policy Language (PPL): You can now use a YAML-based notation for creating simple yet flexible authorization policies. It’s now possible to express policy for contextual factors like time-of-day, groups, users, device identity as well as details about the incoming request.

This release also includes other new features, general improvements, and bug fixes. A complete list can be found in the announcement post.

CKMoon Setting Up Cloudflare Argo and Access on a Raspberry Pi

Hi there! Pomerium team member here. We are very glad to hear Pomerium is working well for you and that it was easy-ish to setup.

Could you share more with the team and community so we can improve the setup experience for other users going into the future?

Our Slack here! https://slack.pomerium.io/

Or join Discuss and document your thoughts for other users here! https://discuss.pomerium.com/

CKMoon The chance of a Bitcoin crash is greater than 80%

Anyone that claims something will crash should put their money where their mouth is and short it.

If someone comes out telling me something will crash but they don't show me they're shorting it, that makes it suspect. My next immediate question is: what's your gain in convincing people that something will crash?

See: Jamie Dimon talking smack while JP Morgan invests in crypto.

CKMoon Comcast accused of cutting competitor’s wires to put it out of business

Not surprised Comcast did this.

Also wouldn't be surprised if Comcast got off scott-free.

CKMoon U.S. Issues Sweeping Plan to Loosen Rules for Internet Providers

Will this allow providers to simply block website traffic or not allow it? Say, Comcast says "nope, you can't access Google" because Google refused to pay Comcast a premium. Is that possible?