Black Box vs White Box Testing in Unit, Integration & E2E Testing: Where Each Belongs
Understand where black box and white box testing belong across unit, integration, and E2E testing. Learn the right technique for every layer of your test suite.
Updates and recent posts about Sigstore..
Story
@laura_garcia shared a post, 2ย months, 2ย weeks ago
Software Developer, RELIANOID
Deploy RELIANOID Load Balancer Community Edition v7 on AWS in minutes with Terraform.
โก Deploy RELIANOID Load Balancer Community Edition v7 on AWS in minutes with Terraform. From zero to a fully functional load balancer โ automated, reproducible, and ready to go. ๐ Follow the step-by-step guide and get started fast. #Terraform#AWS#InfrastructureAsCode#DevOps#RELIANOID#Automation http..
Story
@laura_garcia shared a post, 2ย months, 2ย weeks ago
Software Developer, RELIANOID
๐จ๐ ๐ฃ๐ฆ๐ง๐ ๐๐ฐ๐: ๐ ๐ก๐ฒ๐ ๐๐ฟ๐ฎ ๐ณ๐ผ๐ฟ ๐๐ผ๐ป๐ป๐ฒ๐ฐ๐๐ฒ๐ฑ ๐๐ฒ๐๐ถ๐ฐ๐ฒ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐
๐ ๐จ๐ป๐ฑ๐ฒ๐ฟ๐๐๐ฎ๐ป๐ฑ๐ถ๐ป๐ด ๐๐ต๐ฒ ๐จ๐ ๐ฃ๐ฆ๐ง๐ ๐๐ฐ๐: ๐ ๐ก๐ฒ๐ ๐๐ฟ๐ฎ ๐ณ๐ผ๐ฟ ๐๐ผ๐ป๐ป๐ฒ๐ฐ๐๐ฒ๐ฑ ๐๐ฒ๐๐ถ๐ฐ๐ฒ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ The UK is raising the bar on cybersecurity with the Product Security and Telecommunications Infrastructure (PSTI) Act, now in force since April 2024. As cyber threats continue to grow, this regulation introduces a baseline for ..
ย Activity
@omarabid added a new tool Code Input , 2ย months, 2ย weeks ago.
ย Activity
@hitechdigital created an organization HitechDigital Solutions , 2ย months, 2ย weeks ago.
Link
@varbear shared a link, 2ย months, 2ย weeks ago
FAUN.dev()
How Microsoft Vaporized a Trillion Dollars
A former Azure Core engineer recounts arriving on his first day to find a 122-person org seriously planning to port Windows-based VM management agents - 173 of them, which nobody could fully explain - onto a tiny, low-power ARM chip running Linux. The stack was already failing to scale on server-gra.. read more ย
Link
@varbear shared a link, 2ย months, 2ย weeks ago
FAUN.dev()
The Beginning of Programming as Weโll Know It
In the wake of AI coding assistants like Claude and Codex, many wonder if the human role of "computer programmer" is ending. Although AI shows promise, human developers are valuable in the current transitional period. Real programmers are uniquely positioned to harness AI's power while augmenting it.. read more ย
Link
@varbear shared a link, 2ย months, 2ย weeks ago
FAUN.dev()
What if I stored data in my mouse
The author experimented with storing data in a Logitech mouse's flash memory. Logitech mice communicate through HID++, a protocol that maps device features using stable IDs. Despite efforts to write data to certain registers, only the DPI register could retain data across power cycles... read more ย
Link
@varbear shared a link, 2ย months, 2ย weeks ago
FAUN.dev()
Bad Analogies:ย Not Every Money-Burning Company is Amazon
The essay discusses the misconceptions around companies that burn a lot of money, drawing comparisons to Amazon's successful strategy. It delves into examples like Uber and WeWork to highlight the importance of understanding the long-term implications of cash burn. The focus is on the strategies and.. read more ย
At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.
The sigstore ecosystem is composed of several key components:
- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.
- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.
- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.
Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).
sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.
The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.
