adityasaky

6 ms·

1.
Lingo: A Go micro language framework for building Domain Specific Languages(about.gitlab.com)
133 points by adityasaky 2y ago|50 comments
2.
by adityasaky 3y ago
Hey Will, thanks! The paper is from quite a few years ago now and the reference is for a subset of gittuf's threat model, specifically the metadata manipulation / reference state attacks. The paper talks about MITM as one way to c
3.
by adityasaky 3y ago
As others have said, read access for refs / directories is a bit more complicated than just embedding a secret in the repository given how Git works. We have more exploring to do but it's possible that this isn't easy to impl
4.
by adityasaky 3y ago
At present, gittuf's access control policies are centered around _write_ permissions rather than _read_. That said, we want to re-use some of the same policy semantics to build _read_ permissions too. So, you'd use the same mechan
5.
by adityasaky 3y ago
> does it also filter/escape ANSI Sequences in messages and author names? Not at present! Do you have a link or so I could use to familiarize myself? I'm curious if and how it'd fall within gittuf's scope. > does i
6.
by adityasaky 3y ago
It's multi-pronged and I imagine adopters may use a subset of features. Broadly, I think folks are going to be interested in a) branch/tag/reference protection rules, b) file protection rules (monorepo or otherwise, though mo
7.
by adityasaky 3y ago
Yes! We have clean integration with other tools in the Git ecosystem on our roadmap.
8.
by adityasaky 3y ago
Our alpha release is this week! We have pretty much everything in place for us to cut the tag and publish the first binaries. The next thing is to kick its tires a bit, we have some test repositories in mind for that. I reckon gittuf should
9.
by adityasaky 3y ago
I’m one of the maintainers of gittuf, happy to answer questions!
10.
by adityasaky 3y ago
You've also got to factor in all the software that relies on projects developed primarily on GitHub.
11.
by adityasaky 4y ago
Strange, I hadn't come across that before. Not sure what they're trying to achieve, deny they ever had a leak?
12.
by adityasaky 4y ago
Even then, you want to revoke those credentials rather than try to wipe it from history, no?
13.
by adityasaky 4y ago
I haven't read the paper but if Wikipedia serves as a detection tool, I don't particularly see a problem using it. Perhaps the real problem is the non-Wikipedia, canonical systems to find these probably-relevant cases?
14.
Supply chain security project in-toto moves to the CNCF Incubator(cncf.io)
1 points by adityasaky 5y ago|0 comments
15.
by adityasaky 5y ago
https://fiftytwo.in/story/madras-check/ Here’s an essay from last year that talks about him, his sister, and the culture of chess in Chennai.
16.
by adityasaky 5y ago
How does that work when we're considering stationary first responders though?
17.
by adityasaky 6y ago
Note: OpIndia is far from an unbiased source.
18.
by adityasaky 6y ago
Unfortunately (this may have changed in recent times), they often don't update the public repos in line with their releases. They put them out all at once later. Also, last I checked only the clients are open source? Has that changed?
19.
Upgrade to pip 20.2, plus, changes coming in 20.3(blog.python.org)
4 points by adityasaky 6y ago|0 comments
20.
macOS Big Unsure(tenfourfox.blogspot.com)
3 points by adityasaky 6y ago|0 comments
21.
by adityasaky 6y ago
As I understand it, federation enables two separate instances of some particular service to interact. They can still use single sign-on independently for their own authentication needs.
22.
Moving from Prison to a PhD(nature.com)
1 points by adityasaky 7y ago|0 comments
23.
Operation Glowing Symphony – Darknet Diaries(darknetdiaries.com)
2 points by adityasaky 7y ago|0 comments
24.
by adityasaky 7y ago
I didn't say that?
25.
by adityasaky 7y ago
Just to add on: NPCI is a not-for-profit organization which is a consortium of banks and is promoted by the Reserve Bank of India. And these guys absolutely kill it. I moved from India to the US last year and payments are overall so much mo
26.
by adityasaky 7y ago
I'm in a chat or two as a "single channel" user only, and I'm external to that company. It's not uncommon and depends on the scale I think.
27.
by adityasaky 7y ago
Context?
28.
by adityasaky 8y ago
There’s already an app called Tandem where you chat with people to learn a language. Just a heads up.