HN Explorer

eranation

↗ HN profile [ 92.7 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. Show HN: DepsGuard – One command to harden NPM/pnpm/yarn/bun/uv configs (github.com)

    I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you…

    40 points 5
  2. Ask HN: Why aren't more people worried about AI impersonation in code reviews?

    This is something that has bothered me for quite a while, and I don't see a lot of people talk about it: Agents, in most cases, impersonate the human operator, by design, with no way to enforce, disclose, or control it.…

    2 points 4
  3. A friend got fired from Coinbase for his side project he worked on for 5 years (nexustrade.io)
    11 points 2
  4. Opengrep – an Open Source fork of Semgrep (github.com)
    12 points 7
  5. Hairy Ball Theorem (en.wikipedia.org)
    5 points 1
  6. How to make developers love security (helpnetsecurity.com)
    1 points 2
  7. What Every Developer Needs to Know About GitHub Branch Protection (arnica.io)
    1 points 1
  8. Oracle warns Java users not to upgrade to macOS Sonoma 14.4 on Apple Silicon (devclass.com)
    6 points 2
  9. The Cloud and App Security List (list.latio.tech)
    1 points 0
  10. What Developers Can Learn from Taylor Swift's Re-Recording Strategy (arnica.io)
    2 points 0
  11. How to make developers love security (helpnetsecurity.com)
    6 points 0
  12. MPT-7B-StoryWriter-65k+: LLM for super long contexts (Apache 2.0) (huggingface.co)
    4 points 0
  13. Local webhook development: A Guide to customizing smee.io for fun and profit (arnica.io)
    3 points 1
  14. The Importance of EPSS in Vulnerability Prioritization: A Holistic Approach (arnica.io)
    1 points 0
  15. What Is Pipelineless Security? (arnica.io)
    1 points 0
  16. Considerations for choosing GitHub-hosted or self-hosted runners (arnica.io)
    1 points 0
  17. Have trouble keeping track of your keys? So does Toyota (arnica.io)
    2 points 0
  18. Demystifying the Pl0x GitHub Attack (arnica.io)
    1 points 0
  19. Targeted Deanonymization via the Cache Side Channel: Attacks and Defenses [pdf] (leakuidatorplusteam.github.io)
    1 points 0
  20. We offer our secret scanning service for free, even for private repos (arnica.io)
    3 points 0
  21. Hacking Upstream: Finding a 0-Day in an OpenSSH Key Parser Library (arnica.io)
    2 points 0
  22. GitGoat: Misconfigured GitHub Organization (Open Source) (arnica.io)
    8 points 0
  23. QA help comes in many forms: Sometimes, from your heavily funded competitor (github.com)
    2 points 1
  24. When your competitor cold-emails your stargazers to report a bug in your code (twitter.com)
    3 points 0
  25. Ask HN: What do you do if you get crickets during launch day?

    Hey fellow HNers, We launched our product to public beta after 8 months of hard work, got lucky on product hunt, Reddit, LinkedIn, and we thought this will resonate well with the HN community, but obviously we screwed…

    3 points 6