legobeet

6 ms·

1.
by legobeet 2y ago
I'm going the container route. To get the full seamlessness you're alluding to (easily switch between multiple parallel environments; easy migrations) still requires some additional features but perhaps you can find some inspirati
2.
by legobeet 2y ago
In a similar vein but still containers and a bit more targeted: http://github.com/legobeat/l7-devenv I daily-drove NixOS for a few years and philosophically very much vibe with the foundational ideas. Gave up on it bec
3.
by legobeet 2y ago
A defense-in-depth approach with a special eye to compartmentalization/separation/sandboxing coupled with principle-of-least privilege is a good stance to take, I think. Also keep in mind that "security is a process, not a pr
4.
by legobeet 2y ago
What I am proposing is something you'd run on your independent workstation to interface with existing heterogeneous services and peers. While you certainly can run Vault and Boundary independently, they are more designed to be deployed
5.
by legobeet 2y ago
Sure, but they are only usable as such if attackers also maintain access to the proxy and stay under the radar. Additionally, the proxy has logging and hooks for monitoring so you can audit and filter usage there. As opposed to something w
6.
by legobeet 2y ago
The next step is to actually use underprivileged canary tokens on the client for your day-to-day work, intercept them with a proxy, and replace them with the real deal in a more isolated setting. For example, an application-specific HTTP pr
7.
by legobeet 2y ago
mprocs is worth checking out! https://github.com/pvolok/mprocs
8.
by legobeet 2y ago
Here's a batteries-included local-first dev-environment which does that in order to compartmentalize your credentials: https://github.com/legobeat/l7-devenv Something like Lokal might till be useful here to facili
9.
by legobeet 2y ago
The security side of free editors and IDEs is not great anywhere today for JS development. Once you start wanting more features and integrations, you start facing an apparent choose-any-2 of security, convenience, and productivity. I don&#x
10.
Show HN: Containerized security-focused terminal IDE - de aka l7-devenv(github.com)
4 points by legobeet 2y ago|0 comments
11.
SSH as a Sudo Replacement(whynothugo.nl)
230 points by legobeet 2y ago|111 comments