wallrat

7 ms·

1.
by wallrat 1y ago
There are a few commercial products that allow you to do this also for other ecosystems (e.g. maven, nuget, pypi etc), including ours https://docs.bytesafe.dev/policies/delay-upstream/ Good to see some OSS alterna
2.
by wallrat 1y ago
There are dependency firewalls that let you enforce this (e.g. https://docs.bytesafe.dev/policies/delay-upstream/ ). Don't know any OSS solutions though.
3.
by wallrat 1y ago
How does this relate to the OWASP/Ecma Common Lifecycle Enumeration Specification ( https://tc54.org/cle/ )?
4.
by wallrat 1y ago
Been tracking this project for a while https://github.com/chains-project/ghasum . It creates a verifiable checksum manifest for all actions - still in development but looks very promising. Will be a good compliment to
5.
by wallrat 1y ago
Very well written (as expected) argument for RSC. It's interesting to see the parallels with Inertia.js. (a bit sad to see all the commenters that clearly haven't read the article though)
6.
by wallrat 3y ago
Still have the Turbo Pascal 1.0 manual on my shelf. It was the first language I picked up after Basic and QuickBasic as a child. Wrote a couple of interesting things a few years later in TP 5.5, including a BBS/Kom system and a MUD (wi
7.
by wallrat 3y ago
Is there any effort to integrate SLSA with PyPI? GitHub recently announced[1] that npm support for SLSA is GA now. [1] https://github.blog/changelog/2023-09-26-npm-provenance-gene...
8.
by wallrat 3y ago
> Next step ist to establish good tooling around publishing VEX statements (Vulnerability Exploitability Exchange). That is currently not easy. Agreed. Tooling is needed for creating/publishing/consuming both VEX statements for
9.
by wallrat 3y ago
The best kind of "problem" to have. Expect to build features, integrations and other customizations, and factor in the costs. You can do that with a higher "base" price, or include professional services into the contract
10.
by wallrat 3y ago
DISCLOSURE: I'm working on commercial tooling for this exact problem [1] > 1) What would your expectations be towards a software vendor in terms of what issues to "fix"? I would want the vendor to communicate their analy
11.
Nezha: Deployable and High-Performance Consensus Using Synchronized Clocks(dl.acm.org)
2 points by wallrat 3y ago|0 comments
12.
by wallrat 3y ago
Interesting. Do you keep the SBOMs around after the build to track what's running in production?
13.
by wallrat 3y ago
Are SBOMs a "thing" yet? Is anybody using SBOMs in their day to day workflows? The current tooling for generating them seems to have matured, but tools for storing and managing an SBOM inventory seem non-existent with exception
14.
Filter risky NPM packages with a proxy(bytesafe.tech)
1 points by wallrat 4y ago|0 comments
15.
Zim caching build system for monorepos(github.com)
1 points by wallrat 4y ago|0 comments
16.
FaRM: Fast Remote Memory(research.microsoft.com)
1 points by wallrat 12y ago|0 comments
17.
SimpleRedis - Ephemeral, instant. Free. Perfect for CI and development(simpleredis.com)
1 points by wallrat 13y ago|0 comments
18.
by wallrat 13y ago
Interesting. http://simpleredis.com is a similar service, but for Redis instances (for testing, CI etc), including a nice console. Instances terminates after one hour, but you can run an instance forever if you validate your ema
19.
by wallrat 14y ago
Same here. Last week it was needing Redis slaves to handle 'SLAVEOF NO ONE' from the master without crashing. Needed to tell all read-slaves (hundreds) to stop trying to reconnect when taking the master down. It's fine balance though, you d
20.
by wallrat 14y ago
OP here, not my product, just thought it were interesting, even if hibernation files are an old classic among attack vectors. I do work on something related though, https://scry.co that tries to protect you from the most common damage if
21.
Passware extracts Facebook, Google passwords from memory or hibernation files(blog.lostpassword.com)
2 points by wallrat 14y ago|2 comments
22.
by wallrat 14y ago
Miek Gieben's [1] DNS library [2] is truly excellent. I use it at Port 6379 for an authoritative DNS server, looking up Redis instances [3]. I too have found Go surprisingly productive and enjoyable to code, and our servers seem very sta
23.
by wallrat 14y ago
Interesting note, 2 min after submitting to HN, someone seems to have started an DDOS against our API. Working to route around it right now. At first we just thought it was the HN crowd storming in :-)
24.
by wallrat 14y ago
Thanks for the feedback! The landing page is definitely MVP, we'll see if we can find a designer to make something more inviting! --andreas
25.
by wallrat 14y ago
I've spent the last couple of months trying to relieve the pains of running Redis in the cloud. I think we have come up with a rock solid backend which allows for some awesome tools and functionality. Some highlights: - We support multi
26.
Show HN: Port 6379 - Sane, multicloud Redis hosting. Built with Clojure.(port6379.com)
3 points by wallrat 14y ago|4 comments
27.
Show HN: A Chrome extension that makes sure domains open in incognito mode
6 points by wallrat 15y ago|0 comments
28.
by wallrat 15y ago
Looks pragmatic and useful. I've been experimenting with a similar implementation inspired by Clojure's Hiccup, but Coffekup looks mature enough to consider adopting.
29.
by wallrat 15y ago
I'm also pretty happy with Vimium as a former Vimperator user. The longer I use Chrome though, I find myself using the omnibox more and more for search etc. Especially when coding. So lately I've been experimenting with https://chrome.goog
30.
by wallrat 15y ago
Alternative if you don't have wmctrl installed (not default in Ubuntu for example): ;; Fullscreen (defun switch-full-screen () (interactive) (x-send-client-message nil 0 nil "_NET_WM_STATE" 32 '(2 "_

More ›