cddotdotslash

5 ms·

1.
by cddotdotslash 8mo ago
They exist in a few forms: - The company is smaller and/or already geo-distributed and doesn't have the ability (or awareness) to monitor employee locations or deal with the tax/compliance obligations and so turns a blind eye
2.
by cddotdotslash 11mo ago
It’s incredibly annoying to read. So many super short sentences with the “not just X. Also Y” format. Little hooks like “The attack vector?” “Not fancy security tools. Not expensive antivirus software. Just asking my coding assistant…” I ac
3.
by cddotdotslash 1y ago
I wonder who actually discovered this attack? Can we credit them? The phrasing in these posts is interesting, with some taking direct credit and others just acknowledging the incident. Aikido says: > We were alerted to a large-scale atta
4.
by cddotdotslash 1y ago
Nathan, do you work for Socket? I think you should at least disclose that when sharing posts here.
5.
by cddotdotslash 1y ago
NPM deserves some blame here, IMO. Countless third party intel feeds and security startups can apparently detect this malicious activity, yet NPM, the single source of truth for these packages, with access to literally every data event and
6.
by cddotdotslash 1y ago
I can see the value, but to do the things you're describing, the AI needs to be given fairly highly-privileged credentials. > Right now, Datafruit receives read-only access to your infrastructure > "Grant @User write access
7.
by cddotdotslash 1y ago
In China, nearly everything works via the same app (WeChat) and via QR code. Every grocery store, coffee shop, train station, or point of sale has the same scanner, where you can flash your QR code. I don't think I saw a single physica
8.
by cddotdotslash 1y ago
Companies should automate this. Write their own outage monitoring, feed the results, plus the cumbersome format you have to send to the provider, into an LLM, have it spit out an email requesting SLA credits or whatever the contract specifi
9.
by cddotdotslash 1y ago
I'm still working on https://wut.dev/ - a simpler, privacy-focused, read-only AWS resource viewer. I did a "show Reddit" post a few weeks back and it got quite a bit of interest, so doubling down with actual
10.
by cddotdotslash 1y ago
https://github.com/OpenCut-app/OpenCut/issues/192 I don't know if this style of... discussion is something the Cluely team made popular recently, or if it took off sooner, but I really hope it doesn&#x27
11.
by cddotdotslash 1y ago
Much appreciated! I just put this homepage together recently, so this is really helpful feedback.
12.
by cddotdotslash 1y ago
Wut.Dev ( https://wut.dev ) - a fast, client-side, privacy-focused, alternative to the AWS console. I got tired of using the AWS console for simple tasks, like looking up resource details, so I built a fast, privacy-focused, no-si
13.
by cddotdotslash 1y ago
This "AI will never replace _my_ job" attitude by security folks (and I say this as a security engineer myself) is insufferable. Yeah, there are likely lots of vulnerabilities getting vibe coded into apps right now. But AI is impr
14.
by cddotdotslash 1y ago
It’s interesting that multi-region is often touted as a mechanism for resilience and availability, but for the most part, large cloud providers seem hopelessly intertwined across regions during outages like these.
15.
by cddotdotslash 1y ago
I can recall plenty of times HN has been down.
16.
by cddotdotslash 1y ago
Wut.Dev - a "better" AWS console ( https://app.wut.dev ) I got tired of using the AWS console (the UI is inconsistent across services, resource-heavy, and loaded with things I don't need) I've built a handful o
17.
by cddotdotslash 1y ago
I wish X would allow you to mute lists of people. I keep a list for insufferable VCs, and it would be nice to mute the whole list at once. Maybe a feature request for your extension: take a list and mute everyone on it, and periodically che
18.
by cddotdotslash 2y ago
I bought this book immediately after the last post here on HN about it. Good read so far!
19.
by cddotdotslash 2y ago
I haven’t been a fan of the UI for a while, although admittedly it’s a tough job - there’s a lot to cram in there! I started building a simpler alternative, where everything is just a simple, sortable, exportable table (details in profile).
20.
by cddotdotslash 2y ago
Oh, that's neat! I've found it to be really flexible, although some of the really nice features are (understandably) locked behind the expensive "Pro" version (like right-click context menus, etc.). Will check out your e
21.
by cddotdotslash 2y ago
Thankfully programmatic. It’s a common UI table widget, essentially, and I’ve written some custom code to handle multi-region support, updating the AWS credential handler, pagination, and response processing. From there, it’s a matter of pl
22.
by cddotdotslash 2y ago
I've been working on https://wut.dev in my spare time. It's essentially a simpler, read-only, AWS dashboard where everything is a filterable, searchable, exportable-to-CSV table, with some extra features like multi-reg
23.
by cddotdotslash 2y ago
> There were more geoblocks when the EU law went into action a couple of years ago. There are less now. Source for that?
24.
by cddotdotslash 2y ago
Expect to see more of this, especially when the audience is local/US. IIRC, some newspapers are already doing region blocks. Why should website owners targeting US visitors spend _any_ amount of money making their content comply with a
25.
by cddotdotslash 2y ago
Based on "GetMetricData", you're not paying for services, but rather something with access to your account is making API requests to CloudWatch. Do you have any third-party monitoring tools (Splunk, Datadog, etc.) in use? Can
26.
by cddotdotslash 2y ago
This is why I like to go in at 9, and leave at 5, to avoid the rush.
27.
by cddotdotslash 2y ago
Oh that’s so nice to hear! It’s quite an early alpha, but I’ve working to expand support for more resource types and details. Feedback is very welcomed.
28.
by cddotdotslash 2y ago
I’ve been working on https://console.wut.dev as an alternative, simpler AWS console. Given that AWS has recently started embedding Q (their AI tool) into their UI, I’ll likely keep Wut AI-free. That being said, there are a few f
29.
by cddotdotslash 2y ago
I've been working on https://console.wut.dev/ Right now it's a collection of a few tools: • AWS Resource Explorer - a lighter-weight version of the AWS console where everything is just a sortable/filterable&#
30.
by cddotdotslash 2y ago
I’ve been working on a tool for managing AWS Organizations, SCPs, and IAM policies. At the moment it’s more a collection of scratch-my-own-itch features (interactive tree view for accounts, access denied debugger, and a few tools related to

More ›