Show HN: Kekkai – a simple, fast file integrity monitoring tool in Go

Re:Show HN: Kekkai – a simple, fast file integrity monitorin... by viraptor on Tuesday September 23, 2025 @03:36PM (#45351715)

That means CEO has access to do the changes. It's technically easier to remove that, than to insert FIM into the deployment process. (And will stop other unauthorised employees too) I mean, you already need a working deployment pipeline for FIM anyway, so enforce that?

[ Parent | on HN ]

Re:Show HN: Kekkai – a simple, fast file integrity monitorin... by chucky_z on Tuesday September 23, 2025 @07:05PM (#45353955)

The CEO would've found it very easy to remove the blocker in that case (me). This is the life of small tech businesses. Also, they were modifying configuration files (php-fpm configurations iirc) and not code.

FIM is very useful for catching things like folks mucking about with users/groups because you typically watch things like /etc/shadow and /etc/passwd, or new directories created under /home, or contents of /var/spool/mail to find out if you're suddenly spamming everyone.

[ Parent | on HN ]

Re:Show HN: Kekkai – a simple, fast file integrity monitorin... by catatsuy on Tuesday September 23, 2025 @08:54PM (#45354882)

That’s a great real-world story. Exactly the kind of unexpected modification FIM can help surface—not only security incidents, but also operational surprises.

[ Parent | on HN ]