mlitwiniuk

6 ms·

31.
by mlitwiniuk 6mo ago
I’m a web dev, I never made publicly accessible desktop app, so please forgive my ignorance, but: > At that time, a GitHub Actions workflow we use in the macOS app-signing process downloaded and executed a malicious version of Axios (ver
32.
by mlitwiniuk 6mo ago
Haha, thanks for the heads-up
33.
by mlitwiniuk 6mo ago
Perfect, thanks. Codex app sucks, but I've been exploring opencode for that. Will try MiniMax!
34.
by mlitwiniuk 6mo ago
This is a perfect example of how quickly you can burn through trust that took a long time to earn. I used to be - in my small circle of friends and peers - a genuine advocate for Anthropic and Claude. It was my sole AI assistant for over a
35.
by mlitwiniuk 7mo ago
So the fact, that I recently bought used iPod, replaced the battery and storage and use it now with pair of IEMs make me some sort of a... trendsetter?
36.
by mlitwiniuk 9mo ago
Makes sense. We're working toward making the auditor connection easier on our end too. Not there yet, but it's on the roadmap.
37.
by mlitwiniuk 9mo ago
No, we don't do audits — and that's intentional. I think there's a conflict of interest when the same company advises you on compliance and then certifies you. Incentives get weird. The good news: there are plenty of EU-based
38.
by mlitwiniuk 9mo ago
Speaking of missing categories — there's no "Compliance Tools" or "GRC" category yet. I'm building humadroid.io (SOC 2 / ISO 27001 compliance platform, based in Poland) and as far as I can tell, there aren
39.
by mlitwiniuk 9mo ago
Understanding what a control actually means is the first "aha" moment. And it feels like you've cracked the code. Then you realize that's maybe 10% of the work. Each control needs sub-controls (because "Access Contr
40.
by mlitwiniuk 10mo ago
Honestly, Delve is great. Them and Compai are leading the front of modern AI-assisted compliance right now. I'm chasing them. What I'm trying to do differently is depth of context. Humadroid learns about your company first - how y
41.
by mlitwiniuk 10mo ago
Honestly, great questions - this is either good exercise for me or actionable feedback. Both valuable. Right now I recommend auditors but don't have formal partnerships. Vanta/Drata's auditor relationships are... let's s
42.
by mlitwiniuk 10mo ago
Not yet - but literally finishing this week. Promised a customer I'd ship it before Christmas, so that's been my deadline. AWS and GitHub integrations first. It auto-fetches and verifies the data (where applicable), creating read-
43.
by mlitwiniuk 10mo ago
The big difference is context-awareness. Vanta/Drata give you templates and checklists. Humadroid starts by understanding your company - what you actually do, how you operate, your tech stack. From there, the AI generates policies that
44.
by mlitwiniuk 10mo ago
Humadroid ( https://humadroid.io ) - AI-Assisted SOC 2 & ISO 27001 compliance for small teams. $125/month flat (for now, during beta). Recently crossed the $500/month mark after a painful pivot from HR tech earlier t
45.
by mlitwiniuk 1y ago
Thanks! Really appreciate the interest. We already support a major part of ISO 27001 - actually releasing our Statement of Applicability tomorrow or the day after. I went through ISO certification at my previous company, and that experience
46.
by mlitwiniuk 1y ago
Working on Humadroid - trying to make SOC2/ISO27001 compliance less painful for small businesses. The $30-50K consultant route is brutal for startups, so we're building an AI-assisted platform that helps with policy generation and
47.
by mlitwiniuk 1y ago
That's a great suggestion, thanks! More or less it works like so, policy drafts are auto-generated by AI, you need to go through controls and provide the evidence. To support you better on this, we allow redoing their description with
48.
by mlitwiniuk 1y ago
You could even use google drive with set of spreadsheets and screenshot. The biggest problem is getting through requirements, understanding what they actually mean and having some sort of framework for writing policies. But once you past th
49.
by mlitwiniuk 1y ago
Well, if we're picky here, then it should actually be: SOC 2® ;)
50.
by mlitwiniuk 2y ago
Recently I was preparing video for my YC application [1]. I've used RecordOnce[2] and actually it worked pretty great - I've recorded my actions together with voice. It transcribed voice to text and then used text to voice again t
51.
by mlitwiniuk 3y ago
Thanks. Any examples of Python 3 code worth looking at?
52.
Ask HN: How to get back to programming Python?
59 points by mlitwiniuk 3y ago|56 comments
53.
by mlitwiniuk 3y ago
https://maciej.litwiniuk.net/ I wanted to start with "this week in review" series, but it ended quite quickly. Now I want to publish lesson learned while building my side-project ( https://humadroid.dev
54.
When my running app broke it was a revelation – on taking care of youreself(theguardian.com)
1 points by mlitwiniuk 3y ago|0 comments
55.
Jobandtalent Runs Web Apps(jobandtalent.engineering)
1 points by mlitwiniuk 4y ago|0 comments
56.
Ask HN: How are companies compensating conference speakers?
2 points by mlitwiniuk 4y ago|1 comments
57.
by mlitwiniuk 5y ago
However stupid that may sound, using corded headphones helps me a lot.
58.
by mlitwiniuk 5y ago
And I thought I’m the only freak to listen to goa/psy trance while coding - I’m most likely to get in the flow while listening to it.
59.
by mlitwiniuk 5y ago
Haha, yeah. We've covered whole company, but yeah, you're right and it's a joke. Regarding processes - yes and no - if you can viably proof, that process is not (yet) needed and you're doing things in reasonably manner,
60.
by mlitwiniuk 5y ago
We[1] are one of few software houses, that actually got it. And we're relatively small (30+ people on board). Certification is not easy and it's not cheap (don't anyone tell you it's otherwise), it's time consuming,

More ›