trishankdatadog

9 ms·

1. 61.▲
   In-toto: providing farm-to-table guarantees for bits and bytes(blog.acolyer.org)

   39 points by trishankdatadog 7y ago|4 comments
2. 62.▲
   by trishankdatadog 7y ago

   NPM should use The Update Framework (TUF) [1] and in-toto [2] in order to protect its users from attacks against the registry itself. A notable list of adoptions include: * Datadog is using both TUF and in-toto to defend against attacks bet
3. 63.▲
   by trishankdatadog 7y ago

   Aw, shucks!
4. 64.▲
   by trishankdatadog 7y ago

   Hi hi, I'm a TUF guy, so feel free to ask questions! https://theupdateframework.github.io/ Also see how we took it further at Datadog: https://www.datadoghq.com/blog/engineering/secure-publica
5. 65.▲
   by trishankdatadog 7y ago

   Hi, happy to answer whatever questions you have about the blog post, thanks!
6. 66.▲
   Secure Publication of Datadog Agent Integrations with TUF and In-Toto(datadoghq.com)

   12 points by trishankdatadog 7y ago|1 comments
7. 67.▲
   by trishankdatadog 7y ago

   Hi, former lead researcher at NYU for The Update Framework (TUF) here, now security engineer at Datadog taking TUF further. Planning to help PyPA apply TUF to PyPI. Happy to help answer questions, just reach out to me here, thanks.