bukershok

2 ms·

1.
Show HN: A malicious NPM install reads your .env. On my Mac it reads a decoy(jitpass.com)
2 points by bukershok 18d ago|0 comments
2.
by bukershok 2mo ago
that line just pipes a tar archive into tar to extract the binary, not an executable script to a shell. That said, brew install jitpass/tap/jitpass is the recommended way to install.
3.
by bukershok 2mo ago
My bad I misread your quote blocks we're actually saying the exact same thing. Thanks for defending the use case and highlighting the ~/.aws point.
4.
by bukershok 2mo ago
hnlmorg, i must disagree with you on this one, that most people do not have passwords in plain text. If you a developer or just using API in your day to day you will have secretes in plaintext on your projects.
5.
by bukershok 2mo ago
Soon it will also be for Linux
6.
by bukershok 2mo ago
Yes, but it's completely free for internal Personal and Company use.
7.
by bukershok 2mo ago
Thanks!
8.
by bukershok 2mo ago
I can't agree more.
9.
by bukershok 2mo ago
Hypfer, I am a security leader at the age of 42 with more than 15 years of experience in the field, and I will tell you the truth: I lead a lot of cyber incidents. The purpose of this tool is to help you and companies protect yourselves fro
10.
by bukershok 2mo ago
Soon, it will, yes.
11.
Show HN: Laptop is the last place your secrets are still in plaintext(github.com)
55 points by bukershok 2mo ago|79 comments
12.
Show HN: jit - just-in-time secrets for your Mac, gated by Touch ID(github.com)
1 points by bukershok 2mo ago|1 comments