News for hackers. Stuff that matters.

davidjkerber

Re:Maybe you shouldn't install new software for a bit on Friday May 08, 2026 @11:15AM (#48064363)
Just sharing for awareness, NPM does support that as of February: https://socket.dev/blog/npm-introduces-minimumreleaseage-and...

It must have been a very quiet announcement because I just found out about it this week.

Re:Testing S3 ABAC Locally on Wednesday December 10, 2025 @11:26AM (#46219730)
I'm the author of this tool that evaluates effective AWS access locally. AWS launched ABAC support for S3 buckets (https://aws.amazon.com/blogs/aws/introducing-attribute-based...). In this new model you have to turn on ABAC per bucket.

This post shows you can use iam-lens to preview the effects of turning on S3 ABAC locally before actually enabling it on a bucket.

Re:Policy Tester, a Test Harness for AWS IAM Policies on Tuesday January 07, 2025 @12:00PM (#42624614)
Hi Everyone, I created this and would love to hear your feedback. I know testing IAM policies can be a challenge and I think this can make testing much easier.

Show HN: Every Possible AWS Policy Operator with Examples

https://iam.cloudcopilot.io/resources/operators

AWS Policies have 27 operators like StringEqual, or ArnLike. You can also add set operators (ForAllValues or ForAnyValue) at the beginning of all of them and IfExists at the end. They way these modifiers interact and and behave isn't well documented; I've noticed even experienced AWS engineers have trouble remembering all the nuance. So I documented every possible combination (159) and created...

( Read More... | no comments | on HN )
Re:Ask HN: Who is hiring? (February 2020) on Monday February 03, 2020 @02:46PM (#22228170)
OpsCompass | Omaha, NE or Remote | Full Time | https://opscompass.com OpsCompass makes it easy to manage cloud security, costs, and compliance by providing real-time visibility, monitoring, and control of your cloud environments such as AWS, Microsoft Azure and Google Cloud Platform. Gartner calls it Cloud Security Posture Management[1], I call it keeping out of the Wall Street Journal[2].

We are looking for a user experience designer to level up the user experience of our product and make it a strategic competitive advantage. We believe design and user experience are critical to the success of our product and our company. We have a very technical product; the ability to make the complex simple will be essential to success.

This will involve:

- Designing and mocking of user interactions.

- Ensuring a consistent look, feel, and experience across our product.

- Working closely with customers, the customer success team, and engineering to design user experiences.

- Iteratively improve user experience through data and customer feedback.

We operate as a tight knit team using agile(ish) practices. We talk every day, deploy often, and work together to define a new industry. We have competitive salary, medical, dental, vision, 401k, nice hardware, and the opportunity to work with nice, smart people on cool products.

Feel free to email me at [email protected].

[1] https://www.gartner.com/smarterwithgartner/integrate-your-cl... [2] https://www.wsj.com/articles/capital-one-reports-data-breach...

Re:Ask HN: Who is hiring? (December 2019) on Monday December 02, 2019 @12:22PM (#21684461)
OpsCompass | Omaha, NE or Remote | Full Time | https://opscompass.com

OpsCompass makes it easy to manage cloud security, costs, and compliance by providing real-time visibility, monitoring, and control of your cloud environments. Gartner calls it Cloud Security Posture Management[1], I call it keeping out of the Wall Street Journal[2].

We are looking for a new engineer to work on our product. We integrate with multiple public clouds and SAAS products. Our stack is Typescript running on AWS Lambda and Azure Functions, Rails, and various Sql/NoSql data stores. As we expand our platform into different areas and grow the team we focus on using the right tool for the job with a strong focus on customer value.

We operate as a tight knit team using agile(ish) practices. We talk every day (5-15min), write tests, and deploy often.

We have competitive salary, medical, dental, vision, 401k, nice hardware, and the opportunity to work with nice, smart people on cool products.

Feel free to email me at [email protected].

[1]https://www.gartner.com/smarterwithgartner/integrate-your-cl... [2]https://www.wsj.com/articles/capital-one-reports-data-breach...