prdonahue

7 ms·

1.
by prdonahue 1mo ago
What are some good SaaS alternatives to GitHub for CI (that aren't GitLab)? Is anyone doing anything particularly novel in this space?
2.
by prdonahue 1mo ago
What would you have done if they said no?
3.
by prdonahue 1mo ago
Chainguard | Product Manager, Scanner | REMOTE | Full-Time | https://www.chainguard.dev/ Chainguard is the trusted source for open source. We build hardened, minimal, continuously-updated images, libraries, and packages tha
4.
by prdonahue 3mo ago
They're used quite a bit for nerve entrapment—both in diagnosing and treating.
5.
Chainguard to patch frontier model-discovered vulns in new industry coalition(infosecurity-magazine.com)
1 points by prdonahue 3mo ago|0 comments
6.
by prdonahue 5mo ago
> Anyone know of a better way to protect yourself than setting a min release age on npm/pnpm/yarn/bun/uv (and anything else that supports it)? Most of these attacks don't make it into the upstream source, so solu
7.
by prdonahue 5mo ago
Hmm, we just bought my wife an annual subscription at the Pro tier, largely to use Claude Code. Wonder if she'd be grandfathered in or if we'll need to get a refund.
8.
Docker Hodgepodge Images(chainguard.dev)
4 points by prdonahue 5mo ago|1 comments
9.
by prdonahue 7mo ago
Isn't this sort of repeated communication gaffe why they hired @OfficialLoganK?
10.
by prdonahue 7mo ago
Do any of the bug bounty programs let you filter by some scoring of the source reporter? Seems like it’d be helpful to bury mass reporters in a de facto spam bucket (where “mass” is some absolute quantity of reports along with percent that
11.
by prdonahue 7mo ago
I stopped reading the article because of it.
12.
Secure containers market: from men's room at Taylor Swift concert to NBA finals(chainguard.dev)
5 points by prdonahue 8mo ago|0 comments
13.
by prdonahue 10mo ago
And you moved at a glacial pace compared to Cloudflare. There are tradeoffs.
14.
by prdonahue 10mo ago
Nice, are you collaborating with developers at your company? Or is this more for personal use?
15.
Ask HN: What alternatives to Docker Desktop are people using?
3 points by prdonahue 10mo ago|9 comments
16.
by prdonahue 10mo ago
Chainguard | Senior and Staff-level Product Managers and Engineers, and Engineering Managers | REMOTE (US/CAN) We're building the safe, trusted source for open source. We created the secure Container Image market and we've re
17.
by prdonahue 1y ago
It's the same principle as a company blocking access to domains registered in the past 30 days. Doing so eliminates a huge percent of phishing/malware as these domains are typically identified and taken down otherwise blocked in t
18.
by prdonahue 1y ago
We're taking a very different[1] approach at Chainguard. Essentially: building the world from GitHub repos on SLSA L2 hardened infra and delivering directly to our customers to bypass the registry threat vector (which is where vast, va
19.
Chainguard Libraries for JavaScript: Malware-Resistant Depend. Built from Source(chainguard.dev)
2 points by prdonahue 1y ago|0 comments
20.
by prdonahue 1y ago
Yeah, they've clearly been given some minimal company line and aren't deviating from it. Not going to win any trust.
21.
by prdonahue 1y ago
We're primarily an AWS shop but some Oracle BDR assigned to cover us recently reached out on LinkedIn. I asked for an incident report and received this terse response: > There has been no breach of Oracle Cloud. The published creden
22.
by prdonahue 1y ago
Vibe security.
23.
Vercel knew critical NextJS security vulnerability 5 days before disclosing it(twitter.com)
7 points by prdonahue 1y ago|0 comments
24.
by prdonahue 1y ago
Do you have any affiliation with Elevenlabs?
25.
Ask HN: Best local AI note taker?
1 points by prdonahue 2y ago|2 comments
26.
by prdonahue 2y ago
This was a fun conversation. I remember calling Clint and Jeremy at DigiCert and asking: "hey we have this cool IP address—what are the odds you guys can issue a certificate for it?" I'm not sure if they had to dust off some
27.
by prdonahue 2y ago
Was that paired with a battery? Under NEM3 (and reduced net metering rate), it doesn't make sense to install PV in California without a battery.
28.
by prdonahue 2y ago
What do you think is a fair price? (It seems quite reasonable to me.)
29.
by prdonahue 2y ago
Notion was clearly made by people who do not use or understand keyboard shortcuts; you can't even properly select text without using the mouse. It's been somewhat maddening switching from Confluence.
30.
by prdonahue 2y ago
I did a system earlier this year with My Generation Energy, coincidentally while I was interviewing for the CPO role at Aurora Solar (where I am now). Highly recommend MGE if you’re in the Cape Cod area. Not sure how far off Cape they’ll go

More ›