Joe Birr-Pixton

What do I mean by that? Well, I view GHA runners as public, unsecured shell boxes that I can run scripts on. They can check out and build public code, but at no point should they be given any kind of privileges or secrets.

Popular posts: 2
Total points: 258
HN comments: 63
Rank: #10,272 personal

Visit jbp.io → RSS feedOn Hacker News Jun 2020 – Jul 2024

Security & Privacy 2 Software Engineering 1 Open Source 1

Most points Most discussed Most cited Newest

Third-Party Audit of Rustls

2020109 points15 comments Security & Privacy details

In May and June 2020, Cure53 completed an audit of ring , webpki , and rustls . Their report ( PDF ) fully describes the audit, and makes for interesting reading.