News for hackers. Stuff that matters.

benjy3379

A backup that a compromised host can write, replace, is override with everything in ransonwhere event. We need a immutable and off site copy. And escentialy a backup never tested is a schroding-backup, not a real. A best way is completly test your backup, in trashable environment, if successful restore, your right, if not...
Re:We let our cloud agents query prod (with OIDC, not secrets) on Wednesday October 28, 2026 @04:40AM (#50270716)
This is exactly why you must not do that... But an MCP with read-only scope is what you need. Not a limit in front of a write path, but read-only by construction. I use a MCP of my monitoring app for that (Maintenant), so LLM can inspect my stack easily.

Show HN: SHM – Telemetry for self-hosted apps (no user tracking)

https://github.com/btouchard/shm

Hello HN,I’m the author of SHM. I built this because I distribute self-hosted software and realized I was "flying blind"—I had no idea how many instances were running or which versions were active.I didn't want to use Google Analytics (privacy issues) or heavy tools like Countly/PostHog (too complex for simple usage stats).What makes SHM different: - Agnostic: You can send any JSON payload...

( Read More... | no comments | on HN )