HNHacker News
TopNewBestAskShowJobs

eranation

5,053 karma · joined June 14, 2012

Co-Founder and CTO at arnica.io

My opinions are my own

Harden your package managers and protect yourself from supply chain attacks (no dependencies, MIT):

- https://depsguard.com - https://github.com/arnica/depsguard

Socials: - linkedin.com/in/eranmedan - x.com/eranmedan

submissionscomments

Show HN: Scala Tutorials – interactive Scala 3 lessons in the browser

scalatutorials.com·81 pts·eranation·
41

DepsGuard – Guard your dependencies against supply chain attacks

depsguard.com·1 pts·eranation·
0

Show HN: DepsGuard – One command to harden NPM/pnpm/yarn/bun/uv configs

github.com·40 pts·eranation·
7

Ask HN: Why aren't more people worried about AI impersonation in code reviews?

2 pts·eranation·
1

A friend got fired from Coinbase for his side project he worked on for 5 years

nexustrade.io·11 pts·eranation·
8

Mindfulness, Programming, and the Mistake I Made

yonatanmedan.github.io·3 pts·eranation·
0

Opengrep – an Open Source fork of Semgrep

github.com·12 pts·eranation·
6

Hairy Ball Theorem

en.wikipedia.org·5 pts·eranation·
0

How to make developers love security

helpnetsecurity.com·1 pts·eranation·
2

What Every Developer Needs to Know About GitHub Branch Protection

arnica.io·1 pts·eranation·
1

Oracle warns Java users not to upgrade to macOS Sonoma 14.4 on Apple Silicon

devclass.com·6 pts·eranation·
1

The Cloud and App Security List

list.latio.tech·1 pts·eranation·
0

What Developers Can Learn from Taylor Swift's Re-Recording Strategy

arnica.io·2 pts·eranation·
0

How to make developers love security

helpnetsecurity.com·6 pts·eranation·
0

MPT-7B-StoryWriter-65k+: LLM for super long contexts (Apache 2.0)

huggingface.co·4 pts·eranation·
0

Local webhook development: A Guide to customizing smee.io for fun and profit

arnica.io·3 pts·eranation·
1

The Importance of EPSS in Vulnerability Prioritization: A Holistic Approach

arnica.io·1 pts·eranation·
0

What Is Pipelineless Security?

arnica.io·1 pts·eranation·
0

Considerations for choosing GitHub-hosted or self-hosted runners

arnica.io·1 pts·eranation·
0

Have trouble keeping track of your keys? So does Toyota

arnica.io·2 pts·eranation·
0

Demystifying the Pl0x GitHub Attack

arnica.io·1 pts·eranation·
0

Targeted Deanonymization via the Cache Side Channel: Attacks and Defenses [pdf]

leakuidatorplusteam.github.io·1 pts·eranation·
0

We offer our secret scanning service for free, even for private repos

arnica.io·3 pts·eranation·
0

Hacking Upstream: Finding a 0-Day in an OpenSSH Key Parser Library

arnica.io·2 pts·eranation·
0

GitGoat: Misconfigured GitHub Organization (Open Source)

arnica.io·8 pts·eranation·
0

QA help comes in many forms: Sometimes, from your heavily funded competitor

github.com·2 pts·eranation·
1

When your competitor cold-emails your stargazers to report a bug in your code

twitter.com·3 pts·eranation·
0

Ask HN: What do you do if you get crickets during launch day?

3 pts·eranation·
6

OpenSSF Announces 15 New Members to Strengthen Open Source Software Supply Chain

linuxfoundation.org·1 pts·eranation·
0

AppSec vs. Software Supply-Chain Security

arnica.io·3 pts·eranation·
0
Page 1 of 7Next →