The Painter and the Thief

I had the privilege of see the documentary The Painter and the Thief last weekend. The film tells the story of what happens when the painter of two stolen works of art befriends one of the people who stole from her.

It's an absolutely riveting movie that will have you thinking your watching a drama and not a documentary. I don't want to say anything more about the events detailed in the movie, but I did marvel at how different a relationship can be when expected boundaries are overcome.

If these two people can overcome the expected boundaries between criminal and crime victim, then there should be no reason that DevOps engineers can't do the same. After all, both sides of that relationship want the same thing for their companies and aren't starting with a crime standing between them.

And hopefully, the movie will get a distribution deal so that you can see it and make up your own mind.

Comments

Spring Boot native builds when internet downloads are blocked made simple

No direct access to the internet If you work at a company that controls their software bill of materials, it's quite common to be blocked from directly downloading from: Maven Central Docker hub GitHub (the public parts) Getting the bits Maven Maven is first, because without it, you won't be able to compile your Spring Boot application, let alone move on to turning it into a native docker image. I will be showing changes need to work with artifactory, but you should be able to adapt it to other mirror solutions. repositories { maven { name = "central" url = "https://artifactory.example.com/central" credentials { username = "${project.ext.properties.artifactory_username}" password = "${project.ext.properties.artifactory_apikey}" } } } With this configuration change, you should be able to download your plugins and dependencies, allowing you to compile and ...

Kotlin Notebook when you're blocked from Maven Central

TLDR; If you are blocked getting to maven central when first using Kotlin Notebooks because of company firewalls, you can use a tool like Fiddler Tool to redirect to a different network location. Kotlin Notebooks Kotlin Notebooks are a JDK based environment that brings the Python based Jupyter Notebooks expressiveness to IntelliJ. From the blog post announcing the plugin, it looks like this: At home, the installation of jar files looked like this: I played around with it at home, but I couldn't use it at work. Many companies, mine included, do not allow software components to be used when downloaded directly from the internet. In my companies case, we use a product called Artifactory, which allows you to mirror the content from Maven Central while still applying policies like CVE scanning, tracking, etc. The way it should work IntelliJ, as one of the leading IDE's, generally supports this quite well. In fact, there is a whole setting page dedicated to dealing wi...

Active vs. Passive Log4jShell remediation

Log4jShell All computer professionals should be aware of the Log4jShell ( CVE-2021-44228 ) and it follow on defects. There is no shortage of opinions and lessons to be be learned: The difficulty of performing safe interpretation The problems when assumptions are not clearly documented. I, for one, was completely shocked to find out that a logging system would actually attempt to do variable substitution in an actual message. The difficulty of finding and resolving issues with such a common library that is not provided by an OS package manager. IT'S A LOG4J CHRISTMAS One of my favorite podcasts, Security Now - episode 850 , discussed an analysis by Google regarding the depth of log4j dependencies. From the show notes : One contributing reason is because Log4j is, more often than not, an indirect dependency. Java libraries are built by writing some code which uses functions from other Java libraries, which are built by writing some code which uses functions f...

Boundaries in Dev

Search This Blog