cad

Re:Cloudflare launched self-managed OAuth for all on Thursday July 02, 2026 @02:45AM (#48757447)

https://www.gitguardian.com/files/the-state-of-secrets-spraw...

> In the 2025 report, we showed that nearly 70% of credentials confirmed as valid in 2022 were still valid as of January 2025, meaning they have not been rotated or otherwise remediated. When we retested the same dataset in January 2026, the validity rate remained over 64%. That persistence is not a rounding error. It is an operational signal that remediation, not detection, is still the industry’s limiting factor.

> In the end there is always some long lived secret. What changes is just where and how it is stored, secured and used.

Obviously. The point here is to reduce the number of them

Re:Cloudflare launched self-managed OAuth for all on Thursday June 25, 2026 @03:24AM (#48670093)

Don't get me wrong but data shows that you will likely fail to keep that api key a as secret and you will also fail to revoke when it becomes necessary. You will definately not going to rotate it frequently as you should.

Good thing about the OAuth2/OIDC is these things will not put the trust on the bearer of the api key, but on actual identity that needs to have the access.

Burn – K8s cost waste by namespace and pod. Just kubectl, no deploy

Posted by cad on Wednesday May 13, 2026 @11:37AM
from the github.com dept.

https://github.com/tanrikuluozlem/burn

( Read More... | no comments | 3 points | on HN )

Re:Ethereum 2.0 – Minimum deposit reached on Tuesday November 24, 2020 @09:39AM (#25198778)

Money + heat

Re:Ask HN: How do you keep track of your notes at work? on Saturday April 14, 2018 @02:04PM (#16838539)

With nuclino(http://nuclino.com). It's a real time, collaborative markdown wiki.

Shut Off the Internet with a Literal Valve

Posted by cad on Wednesday September 27, 2017 @12:14PM
from the motherboard.vice.com dept.

https://motherboard.vice.com/en_us/article/mb798b/shut-off-the-internet-with-a-literal-valve

( Read More... | no comments | 2 points | on HN )

Re:A valve that controls your internet bandwith on Friday September 22, 2017 @04:38AM (#15310331)

Put it on Kickstarter :) I would buy one.

Re:Winds – An Open Source Personalized RSS Reader on Saturday November 12, 2016 @07:06AM (#12937526)

does it support firefox?

Re:Show HN: FAQT – A lightweight, personal knowledge base on Sunday July 19, 2015 @06:44PM (#9913140)

Ok since nobody asked.. What is the tech stack behind?

Re:Show HN: FAQT – A lightweight, personal knowledge base on Sunday July 19, 2015 @06:44PM (#9913138)

evernote kind of apps don't work. Except Google Keep. Keep kinda works.

Re:Show HN: FAQT – A lightweight, personal knowledge base on Sunday July 19, 2015 @06:17PM (#9913040)

a favicon would be nice. It's easier to locate the tab that way especially when it's pinned. (firefox users)

Re:Show HN: FAQT – A lightweight, personal knowledge base on Sunday July 19, 2015 @06:15PM (#9913027)

Front page is not behind ssl and you can sign up from there. It's easy to change form action target to a malicious url with a simple mitm attack.

Re:Instagram is down. on Saturday April 12, 2014 @01:36PM (#7578502)

Any chance could it be heartbleed?

Re:Ask HN: What should be the content of wedontneedno.education? on Monday April 07, 2014 @08:08AM (#7545963)

I guess you mean putting some backing data but without making it too complicated, in an easy-to-understand way. A short and simple but informative page with infographics and everything.

Re:How would the unprotected human body react to the vacuum of outer s... on Friday August 16, 2013 @04:35AM (#6222827)

gives 404 error

Re:The limits of Google’s openness on Thursday August 15, 2013 @04:51PM (#6220517)

Google's becoming the new Microsoft.

Re:"Why do all of your websites look the same?" on Saturday July 20, 2013 @10:37AM (#6075337)

Another answer would be, "Yeah, because of Twitter's bootstrap."

Re:Cello: Higher level programming in C on Monday July 15, 2013 @03:23PM (#6047965)

Why, why, why didn't I break his legs!

Re:I took the $300K on Sunday May 26, 2013 @03:16PM (#5772101)

sometimes optimizely's cdn doesn't seem responding from Turkey or it goes just haywire. fyi

Re:Share live code snippets in your browser on Wednesday April 17, 2013 @02:31PM (#5566138)

you can set an arbitrary url like codeshare.io/hackernews instead of the auto-generated value. its like etherpad + socket.im. nice.

Re:See your city the way you haven't seen it before on Sunday April 07, 2013 @12:27PM (#5507673)

For clearance, we didn't put any ads on the video. And we took his directorial comments in account so we are actually shortening the video right now and doing some other improvements on it. Also working on the landing page to display more information about the app itself. But more feedback about the app itself and the concept will be beneficial for us till we update the page.

Re:See your city the way you haven't seen it before on Sunday April 07, 2013 @12:17PM (#5507639)

Right. Thanks for the feedback. The application you've seen in the video is in it's pre-beta stage. We are still working on the ui and some features that we haven't revealed in the video. Those grey boxes are venues, and avatars are your friends. App shows your friends, venues and points of interests (gatherings, events, etc..) on both the map and the camera screen (AR). You can initiate a meetup with your friend(s). When you do that the app will guide you, using the map or the camera screen(AR), to your friend's location; or your friend to your location; or both of you to a mid-point. App also suggests suitable mid-points for a meetup for you to choose. It's golden especially when you are abroad or at a different city.

Re:See your city the way you haven't seen it before on Sunday April 07, 2013 @10:31AM (#5507305)

Thanks for your directorial feedback. Do you actually have anything to say about the concept or the product itself?

Re:Show HN: Socket.im - Share Your Sh*ts Immediately on Sunday March 24, 2013 @11:44PM (#5435319)

This was started as a weekend project. And ended up here. Socket,im is a tool for sharing stuff between parties without hassle. You just type socket.im/something then system creates something what we call a socket. You can send links, messages, images etc via socket.im and anyone who is already connected that socket (by also typing the socket name or if you sent him a link by clicking the link) would receive what you have sent. It's anonymous. Nothing is stored on the server persistently.

Soon we will add file sharing and ssl support.

socket.im is still in its early days so it's something like an alpha version.

EDIT: We will be available at http://socket.im/dev