briandoll

13 ms·

91.
by briandoll 9y ago
One way to protect against this is to not have SSH keys on your laptop. I've been using Kryptonite https://krypt.co/ lately, which is sort of like two-factor for SSH keys.
92.
Extinguish the routing tire fire – How Backplane can help(blog.backplane.io)
2 points by briandoll 10y ago|0 comments
93.
by briandoll 10y ago
Or just use Netlify: https://www.netlify.com/
94.
You don’t get to decide if your product is a platform(blog.reifyworks.com)
1 points by briandoll 10y ago|0 comments
95.
Thoughts from the first WONTFIX Cabal – an unconference for OSS maintainers(blog.reifyworks.com)
1 points by briandoll 10y ago|0 comments
96.
Simplicity and security through reverse tunnels using HTTP/2(medium.com)
3 points by briandoll 10y ago|0 comments
97.
How to write persona-driven marketing copy that never misses its mark(blog.reifyworks.com)
1 points by briandoll 10y ago|0 comments
98.
I compared 20 B2B SaaS pricing page headlines so you don’t have to(blog.reifyworks.com)
4 points by briandoll 10y ago|0 comments
99.
The Business Stack, 2016 Edition(blog.reifyworks.com)
2 points by briandoll 10y ago|0 comments
100.
Introducing Reify – a sales and marketing consultancy for software companies(blog.reifyworks.com)
1 points by briandoll 10y ago|0 comments
101.
A Framework for SaaS Pricing(michaelrbernste.in)
3 points by briandoll 10y ago|0 comments
102.
Build Inspector: An open-source forensic sandbox for CI environments(blog.sourceclear.com)
1 points by briandoll 10y ago|0 comments
103.
A Look at Vulnerabilities and Dependencies by Language(blog.sourceclear.com)
4 points by briandoll 10y ago|0 comments
104.
Secure Continuous Delivery with SourceClear(blog.sourceclear.com)
4 points by briandoll 10y ago|0 comments
105.
Vulnerability Disclosures in an Open Source World(blog.sourceclear.com)
2 points by briandoll 10y ago|0 comments
106.
by briandoll 10y ago
We published this because there are lots of legacy tools that approach this problem with two specific weaknesses: * Many tools just scan a text file where you declare your dependencies, which misses transitive dependencies and won't te
107.
by briandoll 10y ago
The package manager decides which packages are used based on how dependencies are specified. For example, you might ask for library-A >= 1.1, but a transitive dependency specification (a dependency of a dependency) may specify library-A
108.
by briandoll 10y ago
I haven't worked with Haskell myself (and we don't currently support Haskell), but it looks like Cabal is the package manager, which resolves the full graph of dependencies for your project. Most dependencies are specified like &q
109.
Security for Open Source Code: Dynamic Analysis Is the Only Way(blog.sourceclear.com)
36 points by briandoll 10y ago|21 comments
110.
by briandoll 10y ago
A specific disclosed vulnerability found in an open source library. As you might guess, most folks don't file CVEs ( https://cve.mitre.org/ ). Our research team maintains a database of vulnerabilities that includes publi
111.
by briandoll 10y ago
SourceClear identifies libraries you use that have security vulnerabilities in them. We also do the extra work to find which methods in those libraries are the vulnerable methods. When you scan your python projects now, we can actually tell
112.
Vulnerable Method detection now available on SourceClear for Python projects(blog.sourceclear.com)
19 points by briandoll 10y ago|5 comments
113.
by briandoll 11y ago
Moxie gave a great high-level talk on cryptography and Open Whisper Systems at Webstock this year too, for anyone that's interested: https://vimeo.com/124887048
114.
Onsens, Entrepreneurs and the Long Game – Natasha Lampard(the-pastry-box-project.net)
3 points by briandoll 11y ago|0 comments
115.
by briandoll 12y ago
Maybe focus on addressing critical societal issues instead of blaming a blog platform? This narrative is insane.
116.
by briandoll 12y ago
Martin Fowler's blog: http://martinfowler.com/bliki/
117.
by briandoll 12y ago
If anyone is looking for a lawyer, I'd highly recommend Gabe Levine: http://levinebakerlaw.com/attorneys/gabriel-levine/ He's shares some advice on his blog ( http://mylawyergabe.com/ ) an
118.
Introducing packagecloud.io(jamesgolick.com)
1 points by briandoll 13y ago|0 comments
119.
by briandoll 13y ago
http://tom.preston-werner.com/2011/11/22/open-source-everyth...
120.
by briandoll 13y ago
We just posted more details on this incident: https://github.com/blog/1698-weak-passwords-brute-forced

More ›