![David Clinton](/img/default-banner.jpg)
- 89
- 50 744
David Clinton
Canada
Registrace 14. 12. 2020
Videos covering technology trends, security best practices, Linux and cloud server administration, and container virtualization.
Securing Your Container Deployments with Chainguard
Worried about vulnerabilities in the third-party images you're using in your container deployments? Well that's good. Because they probably contain serious security vulnerabilities.
Chainguard container images are build to be as clean and safe as possible...and they're easy to deploy.
www.chainguard.dev/
This video will show you how it's done - and how to use Docker Scout to scan your images for vulnerabilities.
I should note that the two Critical CVEs that showed up when I scanned the Chainguard MariaDB image in the video was actually highly unusual (and, I'm told, was the result of a bit of a freak coincidence). That profile was still a lot better than the official MariaDB I compared it to. But you'll almost certainly bet MUCH better results when you try it for yourself!
Chainguard container images are build to be as clean and safe as possible...and they're easy to deploy.
www.chainguard.dev/
This video will show you how it's done - and how to use Docker Scout to scan your images for vulnerabilities.
I should note that the two Critical CVEs that showed up when I scanned the Chainguard MariaDB image in the video was actually highly unusual (and, I'm told, was the result of a bit of a freak coincidence). That profile was still a lot better than the official MariaDB I compared it to. But you'll almost certainly bet MUCH better results when you try it for yourself!
zhlédnutí: 257
Video
Understanding Open Source Software Lifecycles
zhlédnutí 47Před 5 měsíci
Embark on a journey to grasp the intricacies of "Understanding Open Source Software Lifecycles". Whether you're a developer, IT professional, or simply curious about the evolution of open source projects, this video is your compass. We break down the entire lifecycle, from inception to end-of-life, covering concepts like release stages, versioning, and community contributions. By the end, you'l...
Ensuring Open Source License Compliance in a Business Context
zhlédnutí 86Před 5 měsíci
If you're a business owner, manager, or developer dealing with open source software, this video is your essential resource. We explore the intricacies of open source license compliance, explaining how to protect your organization from legal risks while leveraging the power of open source. Gain insights, best practices, and real-world examples to ensure your business thrives within the bounds of...
Understanding Protective Open Source Software Licenses
zhlédnutí 42Před 6 měsíci
Whether you're a developer, a technology enthusiast, or simply intrigued by software licensing, this video is your compass to navigate the world of protective licenses like GNU GPL, AGPL, and more. We demystify their core principles and the safeguards they provide for your code, ensuring the protection of your software's open source status. This video comes from the Complete LPI Open Source Ess...
Understanding Permissive Open Source Software Licenses
zhlédnutí 143Před 6 měsíci
Whether you're a developer, an open-source enthusiast, or just curious about the licensing landscape, this video is your ultimate guide. We break down the complexities of permissive licenses, such as MIT, BSD, and Apache, offering a clear understanding of their principles and implications. Discover the freedom and flexibility they offer while ensuring compliance with their terms. This video com...
Defining Software Licensing Terms
zhlédnutí 35Před 7 měsíci
Unlock the secrets behind software licensing with our video, "Defining Software Licensing Terms" This video is your one-stop destination for unraveling the complexities of software agreements, whether you're a developer, business owner, or simply curious about the intricacies of licensing. This video comes from the Complete LPI Open Source Essentials Exam Study Guide course: www.udemy.com/cours...
Understanding Software Deployment Models
zhlédnutí 164Před 7 měsíci
Dive into the world of Open Source Software Deployment Models. Whether you're a developer, IT professional, or just curious about the inner workings of open source software, this video will provide you with a clear understanding of the different deployment models. We'll explore the pros and cons of each approach, helping you make informed decisions for your projects. This video comes from the C...
Second-Order Effects: Generative AI and Employment Markets
zhlédnutí 43Před 11 měsíci
If you think looking for a job is hard, wait 'till you've tried finding the right talented people so you can *hire* them! Hiring managers have insanely difficult roles. But it's possible that intelligent adoptions of generative AI technologies could make things MUCH better. Second-order effects, by the way, are the unexpected indirect, long-term, or cascading impacts of a particular event, acti...
Second-Order Effects: Generative AI and the New Rules of Infrastructure
zhlédnutí 66Před 11 měsíci
If you can delegate the technical details of everything you do to your generative AI assistant, how will that change your relationship with your work? If no one really understand what's happening, will anyone be in a position to make positive innovations? And if a lot of the heavy lifting is being done by that assistant, who will actually *own* what you produce? Who will be responsible for any ...
Second-Order Effects: Generative AI and On-Demand Media Creation
zhlédnutí 38Před rokem
What if you could generate a brand new movie or video game that featured any plot, style and actors you wanted? And what if you could configure a robot news service to provide an informative and helpful stream of accurate and neutral real-world information and insights? These things are, at least in theory, nearly within reach. But how might they change society and what big-picture social benef...
Second-Order Effects: Generative AI and Investment Markets
zhlédnutí 89Před rokem
What if everyone had access to AI-driven investment advice? And what if the AI was trained on every single market data point and time-tested investment best-practice? How might the smart choices of millions of retail investors change the market itself? Second-order effects, by the way, are the unexpected indirect, long-term, or cascading impacts of a particular event, action, or policy. And thi...
Working With Node.js and SQLite - LPI Web Development Essentials Study Guide
zhlédnutí 1,3KPřed rokem
Learn how to connect your JavaScript-rich web page to an SQL database (SQLite) to collect and manipulate data. This video comes from the Complete LPI Web Development Essentials Exam Study Guide course: www.udemy.com/course/complete-lpi-web-development-essentials-exam-study-guide/?referralCode=C92570BCBB38302A9257 The LPI Web Development Essentials certification exists to quickly get you up to s...
Figuring Out the Node.js Basics - LPI Web Development Essentials Study Guide
zhlédnutí 1,2KPřed rokem
Learn how Node.js brings JavaScript language to the server-side, enabling developers to build scalable, high-performance, and event-driven applications. This video comes from the Complete LPI Web Development Essentials Exam Study Guide course: www.udemy.com/course/complete-lpi-web-development-essentials-exam-study-guide/?referralCode=C92570BCBB38302A9257 The LPI Web Development Essentials certi...
Manipulating HTML and CSS Using JavaScript - LPI Web Development Essentials Study Guide
zhlédnutí 1,9KPřed rokem
Using the HTML DOM (Document Object Model) to closely control element behavior on your web page. This video comes from the Complete LPI Web Development Essentials Exam Study Guide course: www.udemy.com/course/complete-lpi-web-development-essentials-exam-study-guide/?referralCode=C92570BCBB38302A9257 The LPI Web Development Essentials certification exists to quickly get you up to speed on all th...
Getting Started With JavaScript - LPI Web Development Essentials Study Guide
zhlédnutí 1,3KPřed rokem
Build your first interactive web page using JavaScript and introduce yourself to the browser console for testing JavaScript code. This video comes from the Complete LPI Web Development Essentials Exam Study Guide course: www.udemy.com/course/complete-lpi-web-development-essentials-exam-study-guide/?referralCode=C92570BCBB38302A9257 The LPI Web Development Essentials certification exists to quic...
Applying CSS Selectors - LPI Web Development Essentials Study Guide
zhlédnutí 456Před rokem
Applying CSS Selectors - LPI Web Development Essentials Study Guide
Working With HTML and CSS Basics - LPI Web Development Essentials Study Guide
zhlédnutí 1,6KPřed rokem
Working With HTML and CSS Basics - LPI Web Development Essentials Study Guide
Creating HTML Forms - LPI Web Development Essentials Study Guide
zhlédnutí 2,3KPřed rokem
Creating HTML Forms - LPI Web Development Essentials Study Guide
Understanding HTML Page Elements - LPI Web Development Essentials Study Guide
zhlédnutí 1,6KPřed rokem
Understanding HTML Page Elements - LPI Web Development Essentials Study Guide
LPI Security Essentials: Website Encryption
zhlédnutí 637Před rokem
LPI Security Essentials: Website Encryption
LPI Security Essentials: Introduction to Encryption at Rest
zhlédnutí 1,6KPřed rokem
LPI Security Essentials: Introduction to Encryption at Rest
LPI Security Essentials: Understanding How Network Traffic is Routed
zhlédnutí 601Před rokem
LPI Security Essentials: Understanding How Network Traffic is Routed
LPI Security Essentials: Understanding the Network Architecture Basics
zhlédnutí 1,4KPřed rokem
LPI Security Essentials: Understanding the Network Architecture Basics
Kubernetes vs. Docker Swarm: container orchestration tool feature comparison
zhlédnutí 273Před rokem
Kubernetes vs. Docker Swarm: container orchestration tool feature comparison
Kubernetes for Container Deployments: Understanding the Big Picture
zhlédnutí 1,4KPřed rokem
Kubernetes for Container Deployments: Understanding the Big Picture
Working With Docker Engine: A Docker Command Tutorial for Virtualization Containers
zhlédnutí 72Před rokem
Working With Docker Engine: A Docker Command Tutorial for Virtualization Containers
What Are Containers? Docker and Kubernetes Container Virtualization Big Picture
zhlédnutí 74Před rokem
What Are Containers? Docker and Kubernetes Container Virtualization Big Picture
Understanding Virtualization: Docker and Kubernetes Container Virtualization Big Picture
zhlédnutí 91Před rokem
Understanding Virtualization: Docker and Kubernetes Container Virtualization Big Picture
Working With Hugo: Hosting Static Websites on Amazon S3
zhlédnutí 538Před rokem
Working With Hugo: Hosting Static Websites on Amazon S3
Creating a Route 53 Domain and a CloudFront Distribution: Hosting Static Websites on Amazon S3
zhlédnutí 2,1KPřed rokem
Creating a Route 53 Domain and a CloudFront Distribution: Hosting Static Websites on Amazon S3
Can you recommend more free content for learning? Maybe some exercises?
Sure. Try freeCodeCamp (www.freecodecamp.org/) or W3 Schools (www.w3schools.com/).
Good video, but it doesn't explain how to use hugo with S3
Unfortunately, the S3 part is from the complete course that's on Udemy.
This did not show how to use AWS s3
Does not work - I am not getting any responses, running WireGuard client on MacOS. Don't you need to add ipv4 forwarding and iptables -t nat... entries? I am running my server on AWS Ubuntu EC2.
A programming language must be easy to follow, this is not acceptable
At 4:55 in the video you compare the sizes of the images (standard MariaDB Docker image versus a Chainguard MariaDB image). It shows that the Chainguard image is larger than the standard image. With the stripped down image from Chainguard that helps improve security, I would expect it to be smaller in size. Do you have an idea why in this case it appears to be larger?
I was wondering that myself. Unfortunately, I have no clue. As I used to say to my high school students: if ignorance is bliss, this must be the happiest place on earth. :)
I'm not sure what changed, but I note that it's been updated and is now smaller as expected.
@@AdrianMouat Excellent. Makes perfect sense that it was just a weird anomaly.
thanks for putting this together. Well-organized and clear. Do you think that databases would be a big use of the Chainguard images? When the two critical vulnerabilities are fixed, do you think there will be an updated image from Chainguard? Or, is the administrator supposed to update MariaDB?
I selected MariaDB for the demo mostly because I work with it a lot. But there are hundreds of images of all categories available through Chainguard. My understanding is that Chainguard does a good job maintaining their images, and they'd probably push updated images out within days - if not faster. But I'm honestly not sure that'll necessarily help for your in-production images. You might still need to update your build.
@@davidbclinton thanks for your advice and insights. nice work. It seems easy to use the Chainguard images with little downside and several upsides.
The chainguard/mariadb image has been updated - it's now only 329 MB and has 0 CVEs.
@@AdrianMouat Even better!
truly enlightening to understand how each release stage serves a specific function, whether it's for internal testing, limited audience feedback, or the final public release.
'PromoSM' 😻
Fantastic breakdown of key licensing terms! Thank you!👍
Good morning sir.. I await your answer to my question. Thank you
Hi. I actually can't see your question. Could you send it again?
@@davidbclinton Much love from Nigeria ❤.. Sir I have a question for you.. I am totally new to software development. But I have a strong passion for learning this skill. And I desire to build a School management software for schools here in Nigeria.. This is my question, based on this video this is the starting point towards developing this app. Which architecture is most appropriate How do I get started because freecodecamp has a lot of good resources.. Sir can you provide me a roadmap that I can follow to be able to develop a good School management software.. Thank you sir I anticipate your response sir
@@Beloved_Digital That's a wonderful idea for a project. I'm sure you already know that the final product will involve many technologies deployed across multiple layers. In other words, it'll be complex. But that doesn't mean you shouldn't do it! But I think it does mean that your best resource - at least at the planning stage - is going to be ChatGPT. To illustrate, I just asked it: "Could you create a learning road map for someone looking to acquire the skills he'll need to create a production-ready school management software package?" The answer I got (while I'll paste below) is more than I could have given you. And you'll be able to keep asking follow-up questions until everything is clear. Here's the response: Certainly! Developing a production-ready school management software package involves a combination of software development, project management, and domain-specific knowledge. Here's a learning roadmap to acquire the necessary skills: ### 1. **Fundamentals of Programming** - **Languages**: Python, JavaScript (for web development). - **Concepts**: Object-Oriented Programming, Data Structures, Algorithms. - **Resources**: Online courses (Coursera, Udemy), textbooks. ### 2. **Web Development Basics** - **Frontend**: HTML, CSS, JavaScript, ReactJS or Angular. - **Backend**: Node.js, Python with Django or Flask. - **Database**: SQL (MySQL, PostgreSQL), NoSQL (MongoDB). - **Resources**: FreeCodeCamp, Codecademy, CZcams tutorials. ### 3. **Advanced Web Technologies** - **Frameworks**: Advanced features in Django/Flask (for Python) or Express (for Node.js). - **API Development**: RESTful APIs, GraphQL. - **Authentication & Security**: OAuth, JWT, HTTPS. - **Resources**: Official documentation, specialized courses (e.g., Pluralsight, LinkedIn Learning). ### 4. **Understanding School Management Requirements** - **Domain Knowledge**: School operations, administrative processes. - **User Research**: Interviews, surveys with school staff. - **Resources**: Educational administration books, online forums, seminars. ### 5. **Software Development Best Practices** - **Version Control**: Git, GitHub. - **Testing**: Unit Testing, Integration Testing. - **CI/CD**: Jenkins, GitHub Actions. - **Resources**: GitHub Learning Lab, online tutorials. ### 6. **Project Management** - **Methodologies**: Agile, Scrum. - **Tools**: Jira, Trello. - **Resources**: Project management courses (e.g., PMI, Scrum Alliance). ### 7. **UI/UX Design for Software** - **Principles**: User-Centered Design, Accessibility. - **Tools**: Figma, Adobe XD. - **Resources**: Nielsen Norman Group articles, UX design courses (e.g., Interaction Design Foundation). ### 8. **Deployment and Maintenance** - **Cloud Services**: AWS, Azure, or Google Cloud. - **Monitoring and Scaling**: Load balancing, server management. - **Resources**: Cloud provider tutorials, online courses. ### 9. **Legal and Compliance** - **Data Privacy**: GDPR, FERPA (for educational data). - **Software Licensing**: Understanding different licenses and compliance. - **Resources**: Legal courses for non-lawyers, online resources on software law. ### 10. **Continued Learning and Community Engagement** - **Participate**: Open-source projects, forums like Stack Overflow. - **Stay Updated**: Tech blogs, podcasts, webinars. - **Networking**: LinkedIn, local tech meetups, conferences. ### Supplementary Resources - **Online Communities**: Reddit (r/learnprogramming, r/webdev), Stack Overflow. - **Books**: Specific to technologies and project management. - **Mentorship**: Seek mentors in software development and educational technology. Each of these steps should be tailored based on personal learning pace and the specific requirements of the school management software you are planning to build. It's important to start with a strong foundation in programming and web development, then gradually build on that with more specific skills and knowledge. Remember, practical experience through personal or open-source projects is invaluable. Engage with communities, seek feedback, and iterate on your work. This hands-on experience, combined with the theoretical knowledge, will be crucial in developing a robust, user-friendly, and efficient school management software package.
@@davidbclintonThank you so much for the answer. I have subscribed to your channel sir. I will privilege to learn from you sir
@@Beloved_Digital Great. I expect to hear great things from you!
Much love from Nigeria ❤.. Sir I have a question for you.. I am totally new to software development. But I have a strong passion for learning this skill. And I desire to build a School management software for schools here in Nigeria.. This is my question, based on this video this is the starting point towards developing this app. Which architecture is most appropriate How do I get started because freecodecamp has a lot of good resources.. Sir can you provide me a roadmap that I can follow to be able to develop a good School management software.. Thank you sir I anticipate your response sir
Thank you ❤ from Toronto!!
Great to hear we're neighbours!
very useful content
Thank you David...
I passed the exam recently.I have read the study guide several times and ready to go.
Excellent. Great work. This is a really practical certification that comes with serious value.
Great tutorial video! Many thanks!
the last 2 mins don't work
Yikes. I have no idea how that happened. I'll add a comment when I figure out how to fix this.
One of the most crucial things to Cybersecurity. Thanks. I passed my exam.
Excellent!
❤TCP protocol through Three-way Handshake. Thanks. I did great.
Encryption to protect data at rest. Thanks. I sailed through.
Encryption applied through the Web. Thanks. My result was excellent.
"JavaScript everywhere" paradigm. Thanks
Taking control over HTML with JavaScript. Thanks
Functional programming JavaScript simple. Thanks
CSS stand for Cascading Style Sheet is applied. Thanks
Be separated Content and Presentation good. Thanks
Excellent, professor. Thanks
Easy to understand. Thanks
Great to hear. Thanks!
A good intro to Javascript and the DOM - thx!
Thanks. It's always great to hear real people are actually enjoying this stuff!
Honestly,a newbie would think there is relationship between java and JavaScript.thank you.
It's not that many years ago that the wording confused me, too. :)
Thank you very much!!!!
Great to hear!
This Is awesome!
Thanks!
Great to see you enjoyed it!
How to add a remote scanner to this setup?
The simplest way would be to create a port forwarding rule in the public-facing router where your targets live. The rule would permit access only to hosts coming from your public IP address. You may also need to get access to individual hosts within that remote network, but that'll work the same way as on a local network.
Would love to learn and work on it
Then yesterday was a great day to start. Security matters to everyone - not just big companies.
Just found your channel and im looking forward to binging your security and AWS related videos! Studying CS and working as a Cloud Analyst intern.
Binge away!😀And let me know if you find any problems.
@@davidbclinton I would love if you could do more AWS projects on the beginner to intermediate level, if possible!
@@erythsea That's a good idea. I actually once wrote an entire book with that focus (www.amazon.com/dp/1617294446 - although it's a bit old now). I'm going to try to work that kind of project into my schedule. But it may be a while until I can get to it.
@@davidbclinton Out of stock in Canada :(
@@erythsea If you're in Toronto I could give you one of my extra copies.
Great information, thank you!
Thanks!
What is EC2?
It's just a typical Amazon short form. This one stands for "Elastic Compute Cloud" (there are two words starting with "C"). It's the platform where you can run virtual servers on AWS.
Quite informative p.s. there's some issue with cc
Whoops. I'll get that fixed!
Fixed. Thanks for bringing that up.
that won't work, community edition is full of bugs
I don't know. I've had pretty good experiences with the community edition lately.
@@davidbclinton Yes for me too, but only with Ubuntu. when I try it with debian there is a lot of issues, I guess the version YML is not compatible with docker compose in debian
@@enzoscandelt3350 That's possible. I've been using primarily Ubuntu by habit for so many years that I sometimes forget there are other distros. :)
@@davidbclinton Yes Ubuntu is always working fine for me. Thanks for the repply
Thanks for raising awareness
Let me get this through is it that our information is being hacked... If yes then what should we do??
First of all we should do the simple stuff like being aware of the threats and always patching our software. But my security-related courses (and books) are all about carefully applying security best practices at every layer of our infrastructure (even smartphones and PCs). There's a lot we can do even if there's no such thing as *perfect* security.
I finally got chatGPT to at least lead me to the right path, but only after clicking 'regenerate results'
This is so powerful as well amazing especially ML and AI
What happens when people then get unemployed? Sighhhh
That's exactly why I'm trying to figure out what all this means. My income comes from creating books and courses, but I'm not sure how many people will need them in five years. But on the other hand, there will also be new opportunities...
Make sure to subscribe to this dude!! #1 place to + your subs "promosm"!!!
Woahhh some important stuff
This video was mainly about Cloud Computing
I guess that's true. I did struggle to find the right title for this chapter. But I think it's fair to argue that the cloud is where so much of the action is happening these days, so that'll be where most of the interesting platforms exist. And there's also very little overlap between this chapter and the one that was specific to the cloud.
Thanks for giving a glance of forgotten late 90's gadgets
I had more fun with this part of the project than any other. 😀