HackerTrans
TopNewTrendsCommentsPastAskShowJobs

CountVonGuetzli

no profile record

Submissions

Ask HN: How are you stopping supply chain attacks via compromised dev keys?

5 points·by CountVonGuetzli·2 เดือนที่ผ่านมา·0 comments

comments

CountVonGuetzli
·3 เดือนที่ผ่านมา·discuss
I didn't know OnShape had such a feature. Will check it out!

What you describe is one of the main reasons why I use Rhino3D. It can be scripted via the Grasshopper plugin, which integrates really nicely with Rhino and its primitives. Sadly, Rhino isn't open source and is quite pricy

- https://www.rhino3d.com/ - https://www.grasshopper3d.com/
CountVonGuetzli
·5 เดือนที่ผ่านมา·discuss
Wat, how have I never heard of this! Very cool. Do you have any insights you could share on your own setup, what worked well and what didn't? Are you just storing information in plaintext, or do you use some visualization libraries to make consuming the information a bit easier as well? Very curious about your setup.
CountVonGuetzli
·6 เดือนที่ผ่านมา·discuss
I recently used the AI feature in n8n to write a code node to parse some data, which worked really well. Feels more like LLMs are enhancing low-code solutions.

Also, I see great value in not having to take care of the runtime itself. Sure, I can write a python script that does what I want much quicker and more effectively with claude code, but there is also a bunch of work to get it to run, restart, log, alert, auth…
CountVonGuetzli
·7 เดือนที่ผ่านมา·discuss
Arial is licensed font, distributed by monotype.
CountVonGuetzli
·7 เดือนที่ผ่านมา·discuss
You mean rack mounts for humans?
CountVonGuetzli
·9 เดือนที่ผ่านมา·discuss
For us, introducing a simple device and location validation system (track which users log in with which devices and from where), combined with breached password detection from HIBP, which both can trigger an email validation code flow, practically solved the credential stuffing issues we had immediately.

For the user it's kind of a a soft MFA via email where they don't have to enable it, but also don't always get the challenge.

Astonishingly, we had barely any complaints about the system via customer care and also didn't notice a drop in (valid) logins or conversion rates.
CountVonGuetzli
·6 ปีที่แล้ว·discuss
Can't wait to not have to faff about with configuring strongswan/ipsec for roadwarrior configurations anymore. Setting up WireGuard server and clients on notebooks and phones was a breeze. Really a huge leap for me in terms of usability.