abhisek

10 ms·

91.
by abhisek 1y ago
I think you are only looking at Kubernetes for running and updating container images. If that’s the use-case then I guess it’s overkill. But Kubernetes does much more in terms of providing the resources required for these containers to shar
92.
AI Agents Are Here. So Are the Threats(unit42.paloaltonetworks.com)
1 points by abhisek 1y ago|0 comments
93.
Dynamic Malware Analysis of Open Source Packages at Scale(safedep.io)
8 points by abhisek 1y ago|0 comments
94.
by abhisek 1y ago
IAM is complex. More so with federation and cross account trust. Not sure every weakness can be considered as a vulnerability. In this case, I was looking for a threat model within which this is a vulnerability but unable to find so.
95.
by abhisek 1y ago
> There are compliance reasons Makes sense. But still debatable if the compliance requirements are acting against the security model or perhaps there are biggest concerns here than just secure communication.
96.
by abhisek 1y ago
Still trying to grasp the idea of archiving messages from E2E encrypted communication system into a storage that entirely breaks the purpose of using something like Signal. It’s like encashing on the trust of Signal protocol, app while brea
97.
by abhisek 1y ago
Looks like an AI generated unverified submission. I don’t see any technical details on the nature of the vulnerability or the code affected.
98.
by abhisek 1y ago
> whose only goal is profit maximization It’s really a trade-off. If you raise too much money, you have to at least on paper show growth. All the levers then are tuned for growth. On the other hand, you risk loosing out in the market if
99.
by abhisek 1y ago
Interesting to think about how to guard against these cases where query optimisation leads to unexpected results. I mean this could lead to serious bugs. What can be a way to detect these using linters or in CI before they hit the productio
100.
by abhisek 1y ago
Rail is probably one of the most intuitive framework that I have ever used. No doubt it is highly opinionated but it hides all the complexity for small to medium applications.
101.
by abhisek 1y ago
I would really think it depends on use-case. If you are tired of Wordpress bloat and want something simpler you can probably build a markdown server over a directory with a very very minimal template. I remember Renato used to do that for d
102.
by abhisek 1y ago
So cool! Things we would do to re-live the past. Not really into hardware but I remember trying to build an emulator for z80 just to learn how it work for old Sega games
103.
by abhisek 1y ago
Looks to me another apps ecosystem coming up similar to Android or iPhone. We are probably going to see a lot of AI apps marketplaces that solve the problem of discovery, billing & integration with AI hosts like Claude Desktop.
104.
by abhisek 1y ago
I have a simple question. How do I control dopamine in "my" brain so that I can focus on "here and now" instead of HN and GitHub.
105.
by abhisek 1y ago
Where is Skynet and when is judgement day?
106.
by abhisek 1y ago
This is happening with high value crypto companies with large security teams. Imagine what happens when OSS maintainers are asked to work on GitHub repositories with malicious code as part of fake job interviews? If its not insider access t
107.
by abhisek 1y ago
Good for open source companies eating a part of the pie from big techs by offering open source self-hosted alternatives. For B2B solutions, it’s more about implementation, workflows and support. Of course scaling and core platform maintenan
108.
by abhisek 1y ago
> But is that a bad thing? Probably not a bad thing if you you believe in "antifragility". The technology will improve as it should. I would consider KHTML as a technology. Much like v8 and blink. I have no doubt the open sourc
109.
by abhisek 1y ago
> Furthermore, devs hadn’t normalized feature chasing and so any modern browser worked correctly What you are saying seems much larger than the web itself. I don't think Chromium or for that matter "technology" is responsi
110.
by abhisek 1y ago
Agreed that Apple would have continued browser engineering and focused on security as well in response to attack techniques. I am not suggesting that browsers would not evolve without Google. I am looking at the impact on web today. Perhaps
111.
by abhisek 1y ago
Still trying to understand - Did the mod developers intentionally shipped malicious code or they were compromised by some external attacker to target the downstream users?
112.
by abhisek 1y ago
This is weird to say the least. All the major browser innovation that has happened during the last decade is because of the funding from Google towards Chromium. Browsers used to be one of the most critical and insecure software. All the ma
113.
DeepWiki Generated Technical Documentation for My OSS Security Project(deepwiki.com)
2 points by abhisek 1y ago|1 comments
114.
by abhisek 1y ago
Just tried using http://deepwiki.com/ to generate technical documentation for my open source project. The results are awesome. Much better than the manual docs site that we have been maintaining since the start of the proje
115.
by abhisek 1y ago
I have kind of given up on security awareness as a viable solution for security. Although I can't deny the fact that "human beings" are the weakest link in the security chain, there are just too many real life evidences for t
116.
by abhisek 1y ago
Technology adoption will always lead to misuse or gaming the system. Computers can never be truly safe and secure. If it is then it will be highly restricted. That’s the trade-off. Reasonable security can be achieved. Security researchers h
117.
by abhisek 1y ago
Very curious about the exploitation of CVE-2025-24252, a use-after-free (UAF) using which they achieved zero-click RCE on MacOS. This is inspite of ASLR and heap exploitation mitigations in place to mitigate such vulnerability classes http
118.
by abhisek 1y ago
The original article is behind a paywall so can't really read through it. But am guessing its something to do with the trade war with China. Alternative information source suggests it has something to do with sellers who import from Ch
119.
by abhisek 1y ago
lol. That should be “bug bounty hunters”.
120.
by abhisek 1y ago
Kudos to you for writing such a long ordeal in a humorous manner or at least that’s what I felt while reading it. On topic, it’s probably another example of why scaling a system is so hard. Especially when it comes to tasks that require dee

More ›