freeqaz

49 ms·

631.
Keynote on how Netflix handles Secrets at Scale (2018)(youtube.com)
2 points by freeqaz 5y ago|0 comments
632.
Docker BuildKit Caching in CI(lunasec.io)
2 points by freeqaz 5y ago|0 comments
633.
How to build an open-source business in 2021(lunasec.io)
5 points by freeqaz 5y ago|0 comments
634.
Why the best libraries are built by idiots(lunasec.io)
2 points by freeqaz 5y ago|0 comments
635.
by freeqaz 5y ago
Please delete this post. The URL has an extra slash and is broken. I posted an updated link instead because I didn't know how to fix it... Sorry about that!
636.
End-to-End Testing a MonoRepo(lunasec.io)
3 points by freeqaz 5y ago|1 comments
637.
by freeqaz 5y ago
The built in "Code With Me" in IntelliJ is awesome. Besides that, we use Zoom for video calls. (The screen sharing quality is the best I've found)
638.
by freeqaz 5y ago
I really can't emphasize this enough. I work with a small team (2 other devs) and our morning standup happens 3x per week. We're remote and we're building Open Source tech[0]. We do it similarly to how you describe here -- we
639.
by freeqaz 5y ago
I donate every month instead of dealing with the ads. $20 per month is a lot more money than they'd get by me looking at ads, and I can afford to pay that towards something that makes a big difference for the long-term health of the we
640.
by freeqaz 5y ago
Is it roughly the same to "prove" your identity in the US as it is in the UK? In the US, at least for most credit checks, you just need your SSN, some public record data about where you've lived, and personal data (name, DOB,
641.
Show HN: Open-Source Data Security Platform(github.com)
2 points by freeqaz 5y ago|1 comments
642.
by freeqaz 5y ago
Author here. Feel free to ask me any questions. This is a project I've been working on full-time with 2 other SWEs for about a year. We originally stumbled into this with some Security Consulting work that we did for some startups. We
643.
by freeqaz 5y ago
This is true when you think about it from a security perspective, but it's definitely not always the case. Many people _do_ rely on a WAF to outsource their security. It's often political, from my experience, that security is eith
644.
by freeqaz 5y ago
Yeah, exactly. If you're running on AWS (EC2, Lambda, ECS, EKS, etc), for example, you can query ` http://169.254.169.254/latest/meta-data/ ` and it'll return a valid AWS access token. (That's how att
645.
by freeqaz 5y ago
We have a few different strategies for this. You can read through the "levels" here[0]. (We need to expand on this doc still) Level 1: There are no grants. Level 2: Access requires a "shared secret" in order to authentic
646.
by freeqaz 5y ago
Thanks for taking the time to read through this and write some feedback for me. I sincerely appreciate it! I wrote this post late last night, so pardon the delay with responding. Sleep happens. > It seems to me that all you're doing
647.
by freeqaz 5y ago
For the "broken access controls", "cryptographic failures", and "bad design" categories, I've been working on an open source project to help mitigate those. It's still early and I haven't release
648.
by freeqaz 5y ago
We built something similar at both Uber and Snap. Thanks for sharing this link to an open source equivalent! I wish it had existed a few years ago when I had looked. Oh well!
649.
by freeqaz 5y ago
This is what I did the last time I ran into SQLite being slow with inserts. I just shat out a CSV file and then imported it. It was much quicker! (like 1000x faster) This article has some useful notes for me now to try the next time I play
650.
by freeqaz 5y ago
Could you have people volunteer to help startups with their Launch HN threads? Maybe it could be a "karma perk" like downvoting is? Or maybe you've just been "doing things that don't scale" until it has no long
651.
by freeqaz 5y ago
I'm ready for them to add a level 2 now :P
652.
by freeqaz 5y ago
You can actually SCP into the device without any modification. It's under the Copyright section of the device. It'll show you the default SSH password for your device and then you can drop files in there. :)
653.
by freeqaz 6y ago
I have long pondered an answer to this question. There are some hacks for various DB mechanisms. But nothing truly on par. It's a business opportunity if anybody crack this!
654.
by freeqaz 6y ago
Does anybody use this or anything similar? If so, what problems are you solving?
655.
by freeqaz 6y ago
Re-reading, you're definitely right. Where I got confused was the "Terraform/Heroku is bad because it adds another layer" but then not understanding why Zapier is better?
656.
by freeqaz 6y ago
Would you mind elaborating on this? I'm not sure what you're saying here. Is Zapier a positive or a negative for you?
657.
by freeqaz 6y ago
Are you able to put some fish in the pond? They will eat the larva!
658.
by freeqaz 6y ago
Time to re-sell into the hot GPU market now? :P
659.
by freeqaz 6y ago
That's true, and it definitely can be! In my opinion, the best way to approach this situation is with "non-violent communication"[0] in mind. Don't make the conversation about "this is your fault, do better", i
660.
by freeqaz 6y ago
You have to A/B test this though because who knows when somebody is in crunch and doesn't have time! Also, from a teammate perspective, it might be worth pointing it out to the person. "I noticed a bug in the PR that I found

More ›