News for hackers. Stuff that matters.

guyle

Great offensive tool!

On the defensive side, we are pushing to OIDC short-lived tokens - eliminating the this risk altogather

Show HN: Host, share, promote and track release artifacts via your coding agent

https://jfrog.com/fly/

Coding agents made everything feel fast again - except managing release binaries.Operations like these should be real commands you can run from your terminal:- "Deploy the login fix to staging"- "What's the functional difference between production and staging?"- "Notify me when any security fix hits production"- "Promote Jen's last changes to staging"- "Share the new beta API SDK with the...

( Read More... | no comments | 3 points | on HN )
How does this handle context that becomes stale? E.g., if one tool updates a deployment state and another tool's memory still has the old version. MCP gives you the pipe but not the consistency model.
Interesting approach for embedded use cases. Curious how you see this compared to the OIDC trend in CI/CD where the goal is eliminating stored secrets entirely — different problem space but related threat model.