zwass

Disclosure: I'm CTO at Fleet. One of the biggest challenges is the vendor lock-in that results from the way the MDM systems work (particularly on macOS). In typical MDM solutions you don't own the keys and can't manage migrations without direct interaction from every end user. We expect Broadcom to milk this friction while they can.

Disclaimer: I'm the CTO

One of my favorite things about this is that we are bringing a GitOps workflow to IT teams. As a software engineer myself, seeing change management and CI coming to other domains within the organization is incredibly exciting!

Source code for Fleet is available at https://github.com/fleetdm/fleet.

Super cool! It would be great if the description field had a link to the subreddit and a link to the master list.

This is an interesting looking product. I grew lettuces using the Kratky method in cheap plastic bins and some standard shelving units, which was relatively low effort and had tremendous results at about 25% the cost of this unit (but much less stylish). This looks like a decent intro guide on Kratky: https://www.trees.com/gardening-and-landscaping/the-gratky-m...

There was a similar instance of a fake student living on Stanford campus about 20 years ago. I wonder if this is common among elite schools, or if Stanford has some special draw?

Fun! I kept thinking about doing this. Love your idea to use the dot-matrix tool. Maybe next a GitHub action to keep it updated and/or change it over time?

Fleet | Remote (Worldwide, Americas Timezones) | Full-Time, Remote | https://fleetdm.com

Fleet is building an open future for device management. Open APIs you can use from anywhere. Transparency for end-users. Trust built on an open-core foundation.

We are looking for an Engineering Manager on our Agent team. This position will be responsible for managing the engineers and strategy for:

- Osquery across Windows, macOS, and Linux. - Fleet's agent update system based on The Update Framework. - Fleet Desktop (Desktop application for user notifications and self-remediation). - MDM features.

Join our team of friendly and competent engineers to expand our 100% source-available (github.com/fleetdm/fleet) endpoint management product. We work closely with the osquery community, and have both paying customers and open-source users from organizations you’ve heard of. We’re backed by CRV and Sid Sijbrandij (CEO of GitLab).

This role will report directly to me (CTO), please reach out with any questions: zach[at]fleetdm.com

(I'm on the osquery steering committee)

In theory osquery is "just" virtual tables, but in practice there's quite a bit more that would probably make attaching it to mvsqlite. If you have a use case in mind I would love to know!

For folks who have announced funding rounds, how common have you found these kind of attacks?

I would be commending them if this notice went out March 3 after they had remediated the problem and were aware that they had no logs to determine whether there was abuse.

contents:read to contents:write is a big deal! Just to pick out a random widely used project, nodejs [1] has a number of unsigned commits to the main branch. Their commits could have been tampered with during this timeframe.

What about release artifacts?

[1]: https://github.com/nodejs/node/commits/main

Their statements indicate they were aware and investigating. My frustration is that they didn't give users the opportunity to do their own timely investigation.

> GitHub learned via a customer support ticket that GitHub Apps were able to generate scoped installation tokens with elevated permissions. Each of these tokens are valid for up to 1 hour.

> GitHub quickly fixed the issue and established that this bug was recently introduced, existing for approximately 5 days between 2022-02-25 18:28 UTC and 2022-03-02 20:47 UTC.

> GitHub immediately began working to fix the bug and started an investigation into the potential impact. However due to the scale and complexity of GitHub Apps and their short-lived tokens, we were unable to determine whether this bug was ever exploited.

It's unbelievable to me that they waited over 3 months from when they became aware of this vulnerability until disclosing to effected organizations.

I moved to Canada from the US recently and was shocked at how poorly Interac e-transfers work and that there is no Venmo/Cash equivalent. The system seems to assume a 1:1 mapping from phone numbers or emails to bank accounts. Having multiple bank accounts means disabling and reconfiguring the autodeposit features constantly. I've also gotten used to friends not receiving transfers I send them, which was never a thing with Venmo/Cash -- you just check the history in the app.

ATMs are also mind-boggling after getting used to banks that will refund ATM fees in the US. In Canada it's back to the fee to use ATM + fee from the bank for using an ATM that I remember from 20 years ago in the US.

Fleet | Remote (Worldwide, Americas Timezones) | Full-Time, Remote | https://fleetdm.com

Fleet is building an open future for device management. Open APIs you can use from anywhere. Transparency for end-users. Trust built on an open-core foundation.

Join our team of friendly and competent developers to expand our 100% source-available (github.com/fleetdm/fleet) endpoint management product. We work closely with the osquery community, and have both paying customers and open-source users from organizations you’ve heard of. We’re backed by the CEOs of GitLab, Figma, Panther, and Vanta, and just raised a $20M Series A from CRV.

We are looking for Go, C++, and Solutions engineers across a few different roles. See our hiring site (https://fleetdm.com/jobs) for job descriptions and compensation details.

Fleet source code is available at https://github.com/fleetdm/fleet. Technically, we're "100% source available open core" with a hybrid MIT/proprietary license that we adapted from GitLab. This GitLab connection is no coincidence, as Sid Sijbrandij (CEO of GitLab) was our founding investor and continues to advise us.

We've also "open sourced" our company internals: https://fleetdm.com/handbook/

I'm the CTO, AMA.

Glad to see that you've continued investing in this project! I paid for the Premium version back in the Projectifi times and would have loved a heads up by email that you made some significant updates.

I actually just picked up the exact same printer but hadn't yet had time to see what OSS libraries were available yet. I had a previous project where I printed photos on a low res thermal printer. The images sucked, but people loved it.

Fleet | Remote (Worldwide, Americas Timezones) | Full-Time, Remote | https://fleetdm.com

Fleet is building an open future for device management. Open APIs you can use from anywhere. Transparency for end-users. Trust built on an open-core foundation.

Join our team of friendly and competent developers to expand our 100% source-available (github.com/fleetdm/fleet) endpoint management product. We work closely with the osquery community, and have both paying customers and open-source users from organizations you’ve heard of. We’re backed by Sid Sijbrandij (CEO of GitLab) and are learning from GitLab’s open-core business model.

We are looking for Go and C++ engineers across a few different roles. See our hiring site (https://fleetdm.com/jobs) for job descriptions and compensation details.

I'm excited to see how Guillaume is sharing our security journey as Fleet grows!

Recent conversations with Apple have not yielded much support for a rapidly scaling worldwide-remote team. Our money's peanuts on the scale of things for them, so we need to take matters into our own hands with the strategies described.

Anyone have first-hand experience deploying ClamAV on workstations at scale? I'd be very curious to hear more.

Fleet | Remote (Worldwide, Americas Timezones) | Full-Time, Remote | https://fleetdm.com

Fleet is building an open future for device management. Open APIs you can use from anywhere. Transparency for end-users. Trust built on an open-core foundation.

Join our team of friendly and competent developers to expand our 100% source-available (github.com/fleetdm/fleet) endpoint management product. We work closely with the osquery community, and have both paying customers and open-source users from organizations you’ve heard of. We’re backed by Sid Sijbrandij (CEO of GitLab) and are learning from GitLab’s open-core business model.

Roles: Backend (Go) Engineer | $100,000 to $180,000+ USD + Stock Options | https://fleet-device-management.breezy.hr/p/fec0c9f9afca-bac...

Chaos/Performance Engineer | $100,000 to $180,000+ USD + Stock Options | https://fleet-device-management.breezy.hr/p/8ae4678eb6c0-cha...

Each of these roles would be reporting directly to me (CTO), please reach out with any questions: zach[at]fleetdm.com

I don't think you're missing anything! We didn't need 100% uptime or a globally distributed CDN. What we did need is orders of magnitude cheaper costs. So we moved this particular part of our offering to Hetzner.

I think the interest in this comes from the idea of identifying the needs and optimizing appropriately.

This isn't a direct answer to your question, but our use-case is not latency sensitive (and not even particularly uptime sensitive). So far we've got near 100% uptime and if we needed more we could put multiple servers behind a load balancer. That wouldn't help much with latency -- for that I'd think you need some geographic distribution -- exactly what a CDN is good for.

I can think of two possible reasons:

1) Website assets are generally optimized for size (images, etc.) and so reduce Cloudflare's total cost to service.

2) Cloudflare believes that free tier users who use it for their website assets are more likely to want the other Cloudflare services and therefore convert to paying customers.

This could be an interesting competitor to Mux (https://mux.com/)

Now THAT sounds fun!

Fair enough. So far it's been under an hour or two a month! We'll see how that pans out in the longer term.