dlor

1,301 karmajoined June 23, 2014On HN

Recent submissions

OpenPubKey and Sigstore blog.sigstore.dev
93dlor2y28 comments
The Tyranny of Nits leafwing-studios.com
1dlor2ydiscuss
CVSS 4.0 Is Here, but Prioritizing Patches Still a Hard Problem darkreading.com
3dlor3ydiscuss
CWE Top Most Dangerous Software Weaknesses cwe.mitre.org
155dlor3y128 comments
The EU’s Product Liability Directive could kill open source techradar.com
1dlor3y1 comment
Elastic Stack container images signed with Sigstore elastic.co
1dlor3ydiscuss
Shrink to Secure: Kubernetes and Secure Compact Containers gsantoro.dev
3dlor3ydiscuss
Supply chain security for Go, Part 2: Compromised dependencies security.googleblog.com
2dlor3ydiscuss
The Principle of Minimalism chainguard.dev
9dlor3ydiscuss
Fully bootstrapping Java from source in Wolfi chainguard.dev
8dlor3ydiscuss
Removing PGP from PyPI blog.pypi.org
187dlor3y187 comments
Sigstore: Roots of Trust for Software Artifacts infoworld.com
1dlor3ydiscuss
He Untold Story of the Boldest Supply-Chain Hack Ever wired.com
8dlor3y1 comment
Feeling VEXed by software supply chain security? Us, too theregister.com
2dlor3ydiscuss
87% of Container Images in Prod Have Critical or High-Severity Vulnerabilities darkreading.com
3dlor3y1 comment
Towards Easier, More Secure Signature Tech for the Java Ecosystem with Sigstore blog.sigstore.dev
1dlor3ydiscuss
GitHub says hackers cloned code-signing certificates in breached repository arstechnica.com
2dlor3ydiscuss

All submissions and comments on Hacker News.