News for hackers. Stuff that matters.

bvallelunga

Re:Ask HN: Who is hiring? (December 2022) on Thursday December 01, 2022 @04:35PM (#33823161)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

* Senior Full Stack Engineer (Ecosystem): https://jobs.lever.co/doppler/06df9811-541e-483d-9abe-be01b1...

* Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

* Developer Advocate - Community: https://jobs.lever.co/doppler/f4ec40b5-0016-487e-b511-35e509...

* Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

* Sr. Technical Content Marketer/Editor: https://jobs.lever.co/doppler/b6fc5136-0346-4b25-ba70-96e46e...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Doppler – Senior Full Stack and Senior Site Reliability Engineers – SF or Remote

Hey HN, Doppler is a YC-backed startup that has raised our $20M Series A led by CRV, Google Ventures, and Sequoia. Our mission is to make it easy and secure for developers of every experience level and teams of any size to centrally manage their secrets and app configuration. If this sounds like a mission you can get behind, we’d love to hear from you....

( Read More... | 1 comment | on HN )
Re:Ask HN: Who is hiring? (November 2022) on Tuesday November 01, 2022 @02:50PM (#33425699)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

* Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

* Developer Relations: Content Engine: https://jobs.lever.co/doppler/73803372-67ce-4185-b6bd-72558c...

* Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (September 2022) on Thursday September 01, 2022 @02:13PM (#32680640)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Senior Data Engineer: https://jobs.lever.co/doppler/b7abf249-61ce-4b01-96f8-d0937e...

* Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

* Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

* Product Manager (Growth): https://jobs.lever.co/doppler/1213c1f3-b39a-41de-9c01-530680...

* Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (August 2022) on Monday August 01, 2022 @04:14PM (#32311471)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Senior Data Engineer: https://jobs.lever.co/doppler/b7abf249-61ce-4b01-96f8-d0937e...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Site Reliability Engineer (SRE): https://jobs.lever.co/doppler/3598c272-5b4b-4553-a10c-669c7b...

- Product Manager (Growth): https://jobs.lever.co/doppler/1213c1f3-b39a-41de-9c01-530680...

- Lead Product Designer: https://jobs.lever.co/doppler/ee2ead9f-dcb9-4d47-8c2f-4ab3b9...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (July 2022) on Friday July 01, 2022 @03:36PM (#31951614)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (April 2022) on Friday April 01, 2022 @01:53PM (#30881153)
Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Lead Application Security Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

* Lead DevSecOps Engineer: https://jobs.lever.co/doppler/edd33dbd-ddb5-4abe-bd02-cdde0f...

* Senior Fullstack Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (March 2022) on Tuesday March 01, 2022 @01:24PM (#30517879)
Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Lead Application Security Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

* Lead DevSecOps Engineer: https://jobs.lever.co/doppler/edd33dbd-ddb5-4abe-bd02-cdde0f...

* Senior Fullstack Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (January 2022) on Monday January 03, 2022 @06:24PM (#29788548)
Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

* Engineering Manager: https://jobs.lever.co/doppler/f82b8218-0e9a-4bce-9ebb-498d58...

* Lead Application Security Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

* Senior DevSecOps Engineer: https://jobs.lever.co/doppler/edd33dbd-ddb5-4abe-bd02-cdde0f...

* Senior Fullstack Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (August 2021) on Monday August 02, 2021 @04:24PM (#28042143)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

I'm Brian, the CEO of Doppler. We're creating a new category of tooling for an overlooked part of developing software — managing secrets. Applications typically require code and secrets, two pieces of a puzzle that form a living picture. Doppler is building the other half of the picture through the easiest-to-use platform. And we're doing it with an incredible team of brilliant, humble, and passionate people. Our team is small but growing fast and I believe this could be a place where you can create a large impact on the software industry.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (July 2021) on Thursday July 01, 2021 @02:48PM (#27702906)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Re:Ask HN: Who is hiring? (June 2021) on Tuesday June 01, 2021 @01:38PM (#27358322)
Doppler | San Francisco, CA or Remote | Onsite | Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Lead Product Designer: https://jobs.lever.co/doppler/cf84928c-4643-499f-ac15-4c4119...

- Senior Software Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

- Senior Growth Marketer: https://jobs.lever.co/doppler/f69ab993-9e63-455d-9de0-4696f7...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Ask HN: How would describe API keys and app/infra variables to a developer?

Random question for all the developers willing share 1min of their time. How would you describe your API keys, database urls, system feature flags (not user related), ports, and other app/infra variables in 3 words to another engineer? I promise this isn’t a troll, will use it to help describe a product I am working on.

( Read More... | 3 comments | on HN )
Just went through their onboarding experience. It is amazing! Well done.
Re:Ask HN: Who is hiring? (March 2021) on Monday March 01, 2021 @04:18PM (#26308543)
Doppler | San Francisco, CA or Remote | Onsite or Remote OK | https://doppler.com

Doppler is the easiest way to securely manage all your environment variables in one place. No more sharing secrets over Slack, copying .env files, or home-brewed solutions. Set up your development, staging, and production environments in minutes with integrations for every cloud provider. Doppler allows you to easily manage all your projects and your team's access to secrets.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/doppler

Here are our open roles:

- Senior AppSec Engineer: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

- Senior Full Stack Engineer: https://jobs.lever.co/doppler/f293d858-c3cb-4c1b-b856-b39ed3...

Tech Stack: Node.js & Express backend, Golang CLI, Postgres database, Google Cloud

Based on inbound interest we launched an API where your apps can create Doppler Share links: https://docs.doppler.com/reference#share-secret
Thanks for sharing! I have sent this feedback to our team as I am sure they will find it helpful. Separately, we do have an open Sr. AppSec role that you look like a great fit for. We love working with people that are direct who can also keep the conversation light hearted. If this sounds interesting, feel free to reach out directly at [email protected].

We move fast, don't have any brain teasers, and a care deeply about the culture we create.

Role: https://jobs.lever.co/doppler/63e3511b-5463-4d02-a1f9-0bc463...

We think we shipped the fix. Is the issue still occurring for you?
This is great feedback! I have updated the docs to show a placeholder token.

You are correct, the main Doppler product is not end-to-end encrypted. We use tokenization instead to secure the data. Here's a link that goes more in-depth on how that works: https://docs.doppler.com/docs/security-fact-sheet

Thanks for reporting! We have a fix coming out in the next hour.
Brian from Doppler here. We are an easy way to manage environment variables across projects and services. We did a Launch HN last year: https://news.ycombinator.com/item?id=24719722. Since then, we've been hearing repeatedly from our users that they want a more secure way to share one-off secrets, like API keys, passwords, credit cards, coupons, wire info, lockbox codes, etc. This is understandable, since using Slack, SMS, or email for this leads to your secrets living unencrypted in those systems forever.

So we've made a new product to address this. It is a one-click way to share one-off secrets, end-to-end encrypted with links that auto-expire after a certain number of views and days.

All the encryption is done browser-side so our servers never see the raw secret or the encryption key. We use AES-GCM to encrypt your secrets, with a symmetric key derived from a cryptographically random 64 character passphrase using PBKDF2. If you want to dive deeper into how the data flows, we documented every step of the send and receive flows: https://docs.doppler.com/docs/share-security

We built this so anyone can use it immediately without needing to create an account or jump through any hoops.

Try it out: https://share.doppler.com/s/zg5aqzfbidn9femgnaas2wf2syedqf0s...

Would love to hear what you guys think!

Re:Ask HN: Who is hiring? (January 2021) on Monday January 04, 2021 @03:46PM (#25637650)
Doppler | https://doppler.com | Engineering

Join us in building a world-class engineering team taking the pain out of managing env vars & secrets such as API keys, database creds, certs, etc... through a lovable universal secrets manager. We are backed by all-star investors like Sequoia, Kleiner Perkins, Peter Thiel, and the CEO of GitHub.

Tech Stack:

- Languages: Javascript (Node.js) & Go

- Database: Postgres, Redis, RabbitMQ

- Infra: Google Cloud, Kubernetes

Join Doppler: https://www.keyvalues.com/doppler

Thank you! In Webflow you can use HTML Embed components. In there I wrote some javascript to type out each character.

I put a Gist that has all the code but fair warning it is pretty hacky as I made it over a weekend for fun. I definitely wouldn't treat this code as "high quality" code. https://gist.github.com/bvallelunga/6846593ca50500f058a1f07f...

Similar to AWS we plan to get extensive external compliance certifications starting with SOC 2. We are currently in our first audit cycle and plan to expand into other compliances there after. Truthfully we are still evaluating which compliances to get next (PCII, ISO, etc) based on customer demand.

We also do frequent pentests to help vet our infrastructure and security posture.

We built it using Webflow (an amazing YC company!) and used the Timber template as the foundation: https://webflow.com/templates/html/timber-ui-kit-website-tem...

One thing we strived for during the design phase was to make it feel like a tool you would want to use. From the colors to the bold fonts and large screenshots. I personally was inspired by what Stripe and Slack did, take a traditionally "unsexy" space and aim to make it "sexy".

Older »