HNHacker News
TopNewBestAskShowJobs

dlor

1,301 karma · joined June 23, 2014

submissionscomments

There's no such thing as vuln-free software, it simply doesn't exist, yet

blog.chainguard.dev·2 pts·dlor·
0

Iron Tiger Compromises Chat App Mimi, Targets Windows, Mac, and Linux Users

trendmicro.com·2 pts·dlor·
0

Adopting Sigstore Incrementally

blog.sigstore.dev·8 pts·dlor·
0

Sigstore: An Update on General Availability

blog.sigstore.dev·5 pts·dlor·
0

Privacy in Sigstore

blog.sigstore.dev·4 pts·dlor·
0

The Dirty Secret of Cyber Security Standards

blog.chainguard.dev·2 pts·dlor·
0

Don't Panic: A Playbook for Handling Account Compromise with Sigstore

blog.sigstore.dev·7 pts·dlor·
3

The Principle of Ephemerality

blog.chainguard.dev·3 pts·dlor·
0

Maven Central and Sigstore

central.sonatype.org·2 pts·dlor·
0

Apko: bringing distroless nirvana to Alpine Linux

blog.chainguard.dev·24 pts·dlor·
0

Goodbye SDLC, Hello SSDF What Is the Secure Software Development Framework?

blog.chainguard.dev·2 pts·dlor·
1

How to Verify Cosigned Container Images in Amazon ECS

blog.chainguard.dev·4 pts·dlor·
0

Delegation of Authority from the Systems Programming Perspective

ariadne.space·3 pts·dlor·
1

What an SBOM Can Do for You

blog.chainguard.dev·2 pts·dlor·
0

Celebrating One Million Entries in Rekor

blog.sigstore.dev·1 pts·dlor·
0

Cosign Image Signing in AWS CodePipeline

chainguard.dev·2 pts·dlor·
0

The Sigstore Trust Model

dlorenc.medium.com·1 pts·dlor·
0

Zero-friction “keyless signing” with GitHub Actions

chainguard.dev·1 pts·dlor·
0

Busting 5 Sigstore Myths

chainguard.dev·4 pts·dlor·
0

Notary v2 and Cosign

dlorenc.medium.com·6 pts·dlor·
0

Zero Trust Supply Chain Security

dlorenc.medium.com·7 pts·dlor·
0

Improving the Trust-On-First-Use authentication scheme with transparency

dlorenc.medium.com·13 pts·dlor·
2

In Defense of Package Managers

dlorenc.medium.com·5 pts·dlor·
0

Project Sigstore June Update

blog.sigstore.dev·3 pts·dlor·
0

A New Tool Wants to Save Open Source from Supply Chain Attacks

wired.com·13 pts·dlor·
0

A Safer Curl – Bash?

blog.sigstore.dev·1 pts·dlor·
0

Sigstore Project Update – Binary Transparency for JARs

blog.sigstore.dev·1 pts·dlor·
0

Building a security response team in Alpine

distfiles.dereferenced.org·1 pts·dlor·
0

What's Next for Sigstore

blog.sigstore.dev·3 pts·dlor·
0

The Update Framework and You

dlorenc.medium.com·2 pts·dlor·
0
← PreviousPage 2 of 3Next →