News for hackers. Stuff that matters.

dschofie

Reading through the post it looks like this infects via preinstall?

> The new versions of these packages published to the NPM registry falsely purported to introduce the Bun runtime, adding the script preinstall: node setup_bun.js along with an obfuscated bun_environment.js file.

Show HN: ConfigTailor – A cell based config file generator

https://github.com/telophasehq/configtailor

Hi HN,I open-sourced this configuration generator because we wanted to have a version-controlled way to generate configuration files for our cell-based deployment.You can generate config files for any number of cells based on any schema. You can also nest your configuration to include different things like AWS account then cell name.Please let me know what you think!

( Read More... | no comments | on HN )
Re:Show HN: Tangent – Open-source security data pipeline on Thursday November 20, 2025 @11:56AM (#45994770)
Also, check out how we were able to achieve this performance:

https://docs.telophasehq.com/runtime

Very cool, I wish I could see more of the data without giving up my name + email. A lot of the time i'm hesitant with that because you input it then are continually asked more data
Re:Wiz hardened, near-zero-CVE base images on Wednesday May 14, 2025 @12:48PM (#43986648)
Definitely! A lot of this falls under the "reachability" umbrella. It's just a little harder to say if something is actually used vs just installed. For example, in your app you could exec a script which can be harder for tools to detect with accuracy and there are just quite a few edge cases to handle
Re:FTC announces rule banning noncompetes on Tuesday April 23, 2024 @03:30PM (#40136167)
big news for amazon employees
Re:SRE Doesn't Scale (2021) on Friday February 23, 2024 @04:54PM (#39486594)
I believe the problem comes where there isn't a clear division of ownership between product teams and SREs.

At a previous company, we embedded SREs on teams for a quarter rotation and found that this model worked well. It was nice to give SREs more product team empathy and vice versa

Re:Show HN: Strada – Cloud IDE for Connecting SaaS APIs on Friday February 23, 2024 @12:20PM (#39483436)
congrats on the launch! Looks great!!
Re:PayPal to lay off 9% of global workforce on Tuesday January 30, 2024 @05:06PM (#39196533)
I'm curious how this plays out in terms of their subsidiaries. Anyone have any insight?

As far as I can tell braintree + venmo seem to be doing well

Re:Show HN: Advent of Distributed Systems on Wednesday December 13, 2023 @03:44PM (#38633875)
Really cool and a great way to show off what you've built with Cannon
Super cool! Heads up: when clicking "website" next to "Join our Discord" on your repo, it looks like the link is broken
Re:Spotify Is Screwed on Tuesday December 05, 2023 @02:06PM (#38535454)
This feels like a clickbait title. I don't think that Spotify is in that unique of a position compared to other tech companies that have gone through "hypergrowth" and are now focusing more on profitability.
Alongside this, it's a concerning trend that the size of vehicles is increasing year over year
This guy should try doing VC
Re:Show HN: Monitor your webapp with minimal setup on Tuesday November 21, 2023 @02:22PM (#38368588)
The dashboard looks clean in this loom, and I don't think the pictures you have on https://www.catalystmonitor.com/ do the same justice that this loom does. The pics look a little blurry, and it's hard to see how the screenshots fit in. While the loom shows off the entire dashboard and looks great!

Best of luck with everything

Makes you wonder how many other companies would have this level of consensus supporting their CEO
Re:Show HN: Monitor your webapp with minimal setup on Monday November 20, 2023 @07:51PM (#38357251)
Thanks for sharing! It would be cool to share a loom or a sample dashboard to get things going, as I'd love to see a little more before signing up. It's hard for me to tell where this fits in. Is it a replacement for early usage of datadog? Does this offer support like pagerduty for pinging me? Is it the devX of setup?

Congrats on the launch!

Show HN: Telophase – Open-Source AWS Control Tower

https://github.com/Santiago-Labs/telophasecli

Hey HN – We’re Danny and Ethan from Telophase (https://telophase.dev). We’re building automation to isolate cloud environments by tenant or team. You can think of us as an Open-Source AWS Control Tower[1].Our CLI is a drop-in tool to manage multi-account AWS setups. To start, we support AWS Account Factory and landing zones defined in AWS CDK. We plan to support multi-project GCP and...

( Read More... | 1 comment | 7 points | on HN )

Ask HN: Does anyone support single-tenant on the cloud?

My company is setting up single-tenant via spinning up a new AWS account and spinning up all of our infrastructure in that account for a dedicated customer to interact with via their own vanity URL. This is because that customer is very security focused.Do other companies support this for their larger customers?

( Read More... | 1 comment | on HN )
Re:Configtailor: A Cell Configuration Generator on Thursday September 14, 2023 @05:33PM (#37515147)
Hi, we made configtailor to manage the growing number of JSON config files that we managed for every environment and cell that we maintained.

configtailor generates config files based on any dimension that you input. For example, we have cells (us0, us1, ..., us9) and we have microservices. For internal microservice discovery we use DNS with the following URI `us0.microservice.path`. We were copying and pasting into each cell's config file the path per cell along with dev and test environments. With configtailor we can put in `$cell.microservice.path` and have configtailor generat the appropriate config.

Some other benefits: - Easily set config values that can be reused in each environment. For example, setting a base config value that is only overwritten for tests. - Hooks into what people are used to with other Go tools that generate other files.

Overall, I was excited to open source this because our config files were a copy/paste nightmare and this tool helped us keep our config DRY and prevents people from missing values.

Let me know what you think!

Older »