theorlandog

You are hitting the nail on the head with the communication issues. Truth be told, I am more senior and the rest of the leadership team understands that this individual needs a lot of management and shouldn't be allowed to implement stuff on their own.

"If his arguments are shaky, he will step down from the pedestal on his own when he realises that this decision is inefficient and unnecessary." - The sad part about this person is that when presented with this type of feedback, they always double and triple down despite the facts on the board, it is really odd and risky behavior to be honest.

At the end of the day, I am the person who has to put him in his place, so I want to make sure I am not missing a major point of consideration with celery.

That's definitely the core point. To this guys credit, he figured out that in the 2020's you don't need to be technically correct to sell solutions; you just need to liter your documentation with emojis and horse shit to win people over.

I just want to make sure in this case, I'm not missing out on some super special sauce or advantage that celery provides. Consuming a queue seems trivial that I am worried I am missing something.

Thanks for this. Learning my lesson now to standardize on OTEL first. Thanks for the tip.

Thank you for this recommendation. I have heard the name before, but it slipped my mind to really dig in. I am definitely interested here though. Will start to play around and reach out if it looks promising. Do you all sign BAAs?

This is new to me. Thank you for sharing. Looks like it hits a lot of notes I am looking for. Excited to keep digging in!

Thank you for the candid response. Totally agree with you there. Just seems this last week or so has been worse than usual.

Sharing a blog I wrote giving a crude demo for how to bootstrap a passkey only login flow for a web app. Hoping it gives you all inspiration to push towards passkeys and OIDC because everyone still screws up MFA when applied at large enough scales.

In one step, Passkeys provide multiple forms of authentication including:

* FIDO2 based credential * Origin verification of the requesting web app by the Platform Authenticator (this part makes them phish resistant) * user password, because you had to unlock the platform authenticator in the first place * device authentication, because the passkeys are stored within device bound platform authenticators

Don't let your lazy compliance people tell you passkeys aren't MFA.

I can't believe she showed her feet for free like that. Leaving more money on the table than Satoshi.

Location: Greater Boston

Remote: Remote and hybrid preferred, on-site north of Boston only

Willing to relocate: No

Technologies: AWS, Security, Terraform, Containers, GoLang, Python, SOC2/HITRUST/ISO2700X compliance, Kubernetes, DevOps

Résumé/CV: https://drive.google.com/file/d/1pnjTvSZPpUqoZ-qXJrszWhPr5SZ...

Email: jamie@theorlandog.com

Hello! My name is Jamie. I am a software engineer with a decade of experience tackling complex infrastructure and security problems. I spend half of my focus working with startups and small businesses to build, operate, and certify security management programs to be compliant with frameworks like SOC 2, HITRUST, and ISO 2700x, and the other half with my hands on the keyboard working on GoLang, Python, or Terraform codebases.

I left my last start up at the beginning of 2023 when the general market shakeup led to a change of focus for the company. I took on a role working at a security consultancy to build out their cloud practice. I enjoy the excitement and learning that comes with being exposed to many different customer environments, however, I ultimately view the position as a stepping stone to stay sharp and develop new skills until I find my next opportunity to grow and build with a new company.

Please reach out if you are looking to find a scrappy hacker who builds elegant infrastructure for regulated companies.