HackerTrans
トップ新着トレンドコメント過去質問紹介求人

CountVonGuetzli

no profile record

投稿

Ask HN: How are you stopping supply chain attacks via compromised dev keys?

5 ポイント·投稿者 CountVonGuetzli·2 か月前·0 コメント

コメント

CountVonGuetzli
·3 か月前·議論
I didn't know OnShape had such a feature. Will check it out!

What you describe is one of the main reasons why I use Rhino3D. It can be scripted via the Grasshopper plugin, which integrates really nicely with Rhino and its primitives. Sadly, Rhino isn't open source and is quite pricy

- https://www.rhino3d.com/ - https://www.grasshopper3d.com/
CountVonGuetzli
·5 か月前·議論
Wat, how have I never heard of this! Very cool. Do you have any insights you could share on your own setup, what worked well and what didn't? Are you just storing information in plaintext, or do you use some visualization libraries to make consuming the information a bit easier as well? Very curious about your setup.
CountVonGuetzli
·6 か月前·議論
I recently used the AI feature in n8n to write a code node to parse some data, which worked really well. Feels more like LLMs are enhancing low-code solutions.

Also, I see great value in not having to take care of the runtime itself. Sure, I can write a python script that does what I want much quicker and more effectively with claude code, but there is also a bunch of work to get it to run, restart, log, alert, auth…
CountVonGuetzli
·7 か月前·議論
Arial is licensed font, distributed by monotype.
CountVonGuetzli
·7 か月前·議論
You mean rack mounts for humans?
CountVonGuetzli
·9 か月前·議論
For us, introducing a simple device and location validation system (track which users log in with which devices and from where), combined with breached password detection from HIBP, which both can trigger an email validation code flow, practically solved the credential stuffing issues we had immediately.

For the user it's kind of a a soft MFA via email where they don't have to enable it, but also don't always get the challenge.

Astonishingly, we had barely any complaints about the system via customer care and also didn't notice a drop in (valid) logins or conversion rates.
CountVonGuetzli
·6 年前·議論
Can't wait to not have to faff about with configuring strongswan/ipsec for roadwarrior configurations anymore. Setting up WireGuard server and clients on notebooks and phones was a breeze. Really a huge leap for me in terms of usability.