News for hackers. Stuff that matters.

nimishk

Re: on Sunday December 14, 2025 @09:53AM (#46263443)
A simple, lightweight pure bash CLI tool to manage SSH authorized keys by syncing them with GitHub public keys.
Re:Ask HN: What open source projects need help? on Saturday November 16, 2024 @01:41PM (#42158204)
Phase - Open source application secrets management platform for developers

What we are building and how it works (TL;DR): - CLI that replaces .env files by imports secrets, encrypting and syncing them to the backend. The CLI injects secrets into any application at runtime as environment variables. - A frontend web app to CRUD key, value pairs across dev, staging, prod envs. Add teammates. View logs. - An backend API to store secrets data. Sync them to common platforms like GitHub, Kubernetes, AWS etc.

Tech stack: - Next.js frontend - Python / Django backend (django-rq, django REST, graphene graphql) - Postgresql - Redis

Repos: - https://github.com/phasehq/console - https://github.com/phasehq/cli - https://github.com/phasehq/docs - https://github.com/phasehq/python-sdk - https://github.com/phasehq/golang-sdk - https://github.com/phasehq/kubernetes-secrets-operator - https://github.com/phasehq/terraform-provider-phase

DM me on Slack: https://slack.phase.dev or X: https://x.com/nimishkarmali

Help needed: Contributors are welcome to try the platform and improve it by creating or picking up GitHub issues on any of the above repos, adding new integrations, features, and docs!

I don't think this is the best approach. I am building https://phase.dev which lets you import secrets (.env), encrypt secrets (end-to-end encrypted with keys you control), sync them to other services/platforms (think AWS, GitHub, Kubernetes), and inject them into applications at runtime (e.g., phase run node index.js).

Source: https://github.com/phasehq/console

Re:Backdoor in D-Link routers enables telnet access on Monday June 17, 2024 @09:18AM (#40705346)
laughs in openwrt
Re:Set Next.js public environment variables without rebuilds on Wednesday January 24, 2024 @08:49AM (#39117302)
In source maps, the mapping is done between the transformed code (like minified or bundled JavaScript) and the original source code. As long as the transformations are consistent and predictable, source maps remain effective. When you replace a unique placeholder with an actual value, you're essentially making a very targeted change that shouldn't alter the overall structure or flow of the code. This means the source maps should still accurately reflect the relationship between the source code and the transformed code, except for the parts where the placeholders were replaced.
Re:An Interactive Guide to the Fourier Transform on Friday December 15, 2023 @09:44AM (#38654656)
Exactly what I was thinking!
yeessirr

Show HN: Phase – open-source encryption and key management for developers

https://github.com/phasehq/console

Hello HN!We are developers and security researchers making tools for developers to encrypt data at an application level while maintaining sole control of their keys.We believe that data should always be encrypted unless it is part of an active computation. Encryption is relatively easy, but key management is challenging. There are plenty of encryption tools and SDKs that are out there...

( Read More... | no comments | 7 points | on HN )