tompic823

6 ms·

1.
by tompic823 3y ago
I wonder what impact this will have on Mozilla's OpenSSH configuration guide[0], which currently specifies `chacha20-poly1305@openssh.com` as its primary cipher. Should that be dropped to rely solely on AES ciphers? [0] https:/&#
2.
Advancing iMessage Security: iMessage Contact Key Verification(security.apple.com)
1 points by tompic823 3y ago|0 comments
3.
by tompic823 3y ago
I'm the CTO of a popular Secrets Management platform. It's fair to say that I personally have a lot of experience with secrets and requirements around them, based on conversations with customers. The primary missing feature here s
4.
Reliably Testing Race Conditions(doppler.com)
1 points by tompic823 3y ago|0 comments
5.
Reliably Testing Race Conditions(doppler.com)
1 points by tompic823 3y ago|0 comments
6.
by tompic823 4y ago
When this deal was originally announced, Adobe's stock took a ~10% hit. Now that the deal is getting blocked, their stock is again taking a hit? I certainly can't claim to understand the public markets.
7.
by tompic823 4y ago
You're exactly right about those two problems, and they actually go together quite well. If a user who previously had access to a secret suddenly has that access revoked, you should rotate that secret. Technically that's only real
8.
The Current Secrets Rotation Process Is Broken(doppler.com)
68 points by tompic823 4y ago|21 comments
9.
by tompic823 4y ago
Our process never includes ghosting anybody, even when we pass on a candidate, so something must have gone very wrong here. Could you email me at thomas@[company domain]? I'll look into this further.
10.
by tompic823 4y ago
At Doppler we have a strong culture of engineering excellence, thorough PR review, security, automation/CI, and helping each other succeed. We give engineers 30% time to work on things they think are important and are remote first (but
11.
What I Focused on in 2022(pic.dev)
1 points by tompic823 4y ago|0 comments
12.
How Doppler Automatically Rotates Secrets At Scale(doppler.com)
1 points by tompic823 4y ago|0 comments
13.
How we built our automated Secrets Rotation Engine(doppler.com)
10 points by tompic823 4y ago|0 comments
14.
Tim Cook, Sir Jony Ive, and Laurene Powell Jobs – Full Interview at Code 2022(youtube.com)
4 points by tompic823 4y ago|0 comments
15.
by tompic823 4y ago
Co-founder/CTO of Doppler here. I'd agree that Doppler currently focuses very heavily on UX. We aim to fit into developer workflows, regardless of where devs run their code. This includes local development (macOS/Windows&#x2F
16.
by tompic823 5y ago
This is another good read buried in the body of https://news.ycombinator.com/item?id=29135559 .
17.
Structure of a Smartphone(medium.com)
1 points by tompic823 5y ago|1 comments
18.
by tompic823 5y ago
Doppler solves this problem by storing your secrets in the cloud *hand wave*. In actuality, the Doppler CLI (a Go binary) fetches your secrets from Doppler's API and injects them as environment variables into your specified process. Th
19.
For Wars of the Future, Pentagon Looks to Distant Past: The B-52(wsj.com)
2 points by tompic823 6y ago|2 comments
20.
by tompic823 6y ago
This solves a very real problem that some services like GitHub [0] have started to address. Auth tokens are being committed to public repos at an alarming rate. Detecting this and ideally preventing it as early as possible is key to avoidin
21.
by tompic823 6y ago
Really interesting development in the section titled "Crash Monitoring?": > An interesting side effect of the new processing pipeline is that imagent is now able to detect when an incoming message caused a crash in BlastDoor (i
22.
by tompic823 6y ago
I haven't gone as far as emailing support, but my single tweet asking if there would be a postmortem after a previous incident did not receive a reply. My other tweets to them, such as inquiring about a recent increase in spam, receive
23.
by tompic823 6y ago
I'm a happy Fastmail customer, but the number of outages recently has been a little concerning. There has been at least one outage per month for the past several months. And what's worse is that I've never seen a postmortem p
24.
by tompic823 6y ago
This is fantastic! I often workout specific muscle groups and cycle through different exercises to target each, so this tool very nicely aligns with that. The videos are a great touch to help me make sure I have proper form. And overall see
25.
Top-Selling Videogames of the Last 25 Years Show Mario and Call of Duty Rule(wsj.com)
1 points by tompic823 6y ago|0 comments
26.
by tompic823 6y ago
We fully support GitHub Actions and have a native GitHub Action[0] that you can use to install our CLI. [0] https://github.com/marketplace/actions/install-doppler-cli
27.
by tompic823 6y ago
Lots of really great questions in here! Starting at the top- The process demoed in the video is for user-based auth. Service tokens can be issued programmatically and provide read-only access to one config. You can pass these into your envi
28.
by tompic823 6y ago
The local fallback file is updated each time new secrets are fetched. It is possible for your Doppler secrets to change between your last successful fetch and your next unsuccessful fetch, and in that scenario you wouldn't be operating
29.
by tompic823 6y ago
We fully support using Doppler on bare metal servers, VMs, and just about any other cloud service via our CLI [0]. This would be identical to how you'd access your secrets locally when developing. You'd wrap your command with our
30.
by tompic823 6y ago
Thanks for pointing this out, you're absolutely right. I'm linking to our Security page[0] and our security docs[1] below, but we'll definitely be updating our marketing site to place more of an emphasis on this. I hope the r

More ›