niros_valtos

15 ms·

31.
FBI found Huawei equipment in Midwest could disrupt US nuclear communications(thehill.com)
1 points by niros_valtos 4y ago|1 comments
32.
by niros_valtos 4y ago
You can use a test mode with Stripe. You can run as many APIs as you want to generate data. Am I missing something?
33.
What every developer should know about GitHub CODEOWNERS(arnica.io)
3 points by niros_valtos 4y ago|0 comments
34.
by niros_valtos 4y ago
I would expect to see a code example, but overall makes sense.
35.
How to Protect Stale Source Code Repositories on GitHub(arnica.io)
5 points by niros_valtos 4y ago|0 comments
36.
by niros_valtos 4y ago
The problem with skipping major optimizations is that the tech debt grows with time. The ROI calculation is tough, but there are things the simply make sense by looking at the data, e.g. find underutilized resources based on the native tool
37.
by niros_valtos 4y ago
This is madness! The freedom of press may end up as a pay to play.
38.
by niros_valtos 4y ago
If I had to parse XMLs in my job today, I’d quit. It is equivalent to writing code in VB6 for me.
39.
Why we offer our advanced secret scanning for free, even for private repos(arnica.io)
3 points by niros_valtos 4y ago|0 comments
40.
by niros_valtos 4y ago
You can assess all GitHub app permissions on https://arnica.io . The excessive permissions are presented at the end of the data ingestion process. This is part of the freemium.
41.
Supply Chain Breach: Tracing the Impact of a Clothing Retailer on Your Prod Env(arnica.io)
5 points by niros_valtos 4y ago|0 comments
42.
Show HN: Free secrets scanning for unlimited private GitHub repos(arnica.io)
19 points by niros_valtos 4y ago|3 comments
43.
by niros_valtos 4y ago
T-Mobile stated that they don't believe that any sensitive data was stolen. The moment your source code leaks and it has secrets in it, this is a game over! The problem is not only with the fact that secrets need to be rotated, but the
44.
by niros_valtos 4y ago
Can you imagine how many tacos they can buy now? They may get 10x multiples over time
45.
How to Protect Yourself Against GitHub/OAuth Apps Supply Chain Attacks(arnica.io)
9 points by niros_valtos 5y ago|0 comments
46.
by niros_valtos 5y ago
Globant should have used Okta to login to all dev tools. It can never be breached. Oh wait… maybe it can? On a more serious note, their admin 8-lowercase-character passwords are too easy to guess.
47.
by niros_valtos 5y ago
It doesn’t matter if you are a startup company, large enterprise, or a malware gang - if your source code has been private from any reason and then leaked, there are businesses implications to it. In this case, a Ukrainian hacker stole the
48.
Stay tuned for Kaspersky source code leak(twitter.com)
3 points by niros_valtos 5y ago|0 comments
49.
How to survive a state-actor trying to put a backdoor in your code?(arnica.io)
20 points by niros_valtos 5y ago|2 comments
50.
by niros_valtos 5y ago
As long as you don’t rubber stamp the PRs, any approach would be good.
51.
by niros_valtos 5y ago
Storing PII on GitHub is not wise. It is stored with the history and can be restored even if deleted. As for opening up the repo publicly, it can be achieved with a quick win by triggering alerts on such changes.
52.
by niros_valtos 5y ago
Your doubt is right. Here is how repos can be restored: https://docs.github.com/en/repositories/creating-and-managin...
53.
by niros_valtos 5y ago
Quote: "Quote: "GitHub is available to developers in all countries, we are continuing to ensure free open source services are available to all, including developers in Russia". " My opinion: This is the right commercial
54.
App SEC vs. Software Supply Chain Security Explained(arnica.io)
3 points by niros_valtos 5y ago|1 comments
55.
Are you concerned by excessive permissions on GitHub Apps?(old.reddit.com)
1 points by niros_valtos 5y ago|0 comments
56.
Hacking Hacker News for fun and profit(arnica.io)
2 points by niros_valtos 5y ago|1 comments
57.
by niros_valtos 5y ago
Do the same for Hacker News and you’ll be a top 500 website
58.
by niros_valtos 5y ago
It wasn’t a big thing when it was disabled by default and now it is because the default flipped?! I think this is a big issue regardless - it’s like selling a bike rack with every new car. It doesn’t seem right and enforces the wrong behavi
59.
Cyberattack on one of Norway’s largest media companies shuts down presses(www-therecord.recfut.com)
1 points by niros_valtos 5y ago|0 comments
60.
by niros_valtos 5y ago
This is great! The moment DuckDuckGo will make their accuracy and UX better it will skyrocket. Maybe it is related somehow to their new browser initiative, but we’ll see.

More ›