Hacker News: itscrush

New comment by itscrush in "Trivy under attack again: Widespread GitHub Actions tag compromise secrets"

itscrush — Tue, 24 Mar 2026 03:41:05 +0000

Usually through service accounts. Those are single factor.

New comment by itscrush in "Signal Secure Backups"

itscrush — Mon, 08 Sep 2025 19:48:04 +0000

Monetize first is their strategy given this included statement:

> Our future plans include letting you save a secure backup archive to the location of your choosing

New comment by itscrush in "Cloudflare 1.1.1.1 Incident on July 14, 2025"

itscrush — Wed, 16 Jul 2025 15:46:10 +0000

Looks like AdGuard allows for same, thanks for mentioning dnsmasq support! I overlooked it on setup.

New comment by itscrush in "How to lock down your phone if you're traveling to the U.S."

itscrush — Wed, 09 Apr 2025 15:00:50 +0000

Certainly doable, grapheneOS has it https://grapheneos.org/features#duress.

New comment by itscrush in "What's Happening to Students?"

itscrush — Tue, 25 Mar 2025 23:48:53 +0000

Wrong. Their profile clearly states high school teacher. Why assume?

New comment by itscrush in "Google to buy Wiz for $32B"

itscrush — Wed, 19 Mar 2025 13:28:15 +0000

Wiz is closer to the CNAPP field instead of the software composition analysis tools you mention, Snyk would fit here for SCA.

Sysdig, Palo Alto's Prisma Cloud, or a few others compete with Wiz's CNAPP offering. Wiz also strays into some SCA and SCA-alike tooling for containers, code or XDR with their CDR/XDR products log ingest and agents available for response/quarantine.

New comment by itscrush in "Google to buy Wiz for $32B"

itscrush — Tue, 18 Mar 2025 13:10:27 +0000

Wiz uses various API's via read access in your accounts/orgs/subscriptions to assess risk of configuration.

They also snapshot your disks, cloning them to Wiz accounts to provide secrets scanning / vuln scanning / etc against your infra.

These resulting risks / findings are scored and provided in their SAAS Wiz console via dashboards / APIs / integrations with remediation guidance.

New comment by itscrush in "The Alexa feature "do not send voice recordings" you enabled no longer available"

itscrush — Mon, 17 Mar 2025 12:29:49 +0000

Yes folks do and I can't understand it either. Have asked / talked through their rationale but frankly humans are irrational is my clear takeaway. I experience it mostly when folks are prompting search in family settings. These usually overlap with the no-earbuds watch-videos crowd while others are reading / napping, etc.

New comment by itscrush in "Pressure grows to hold secret Apple data privacy hearing in public"

itscrush — Fri, 14 Mar 2025 12:32:57 +0000

Certainly not the UK, they're spearheading much of the privacy problem.

New comment by itscrush in "Feds Link Cyberheist to 2022 LastPass Hacks"

itscrush — Sat, 08 Mar 2025 02:52:19 +0000

Bitwarden for usability. Vaultwarden if you can and prefer to self host. Being on the internet you'll have to trust someone at some point. Can reduce risk by combining strong 2FA (not SMS/Email) alongside backing up your vault.

Ensure all your passwords get reset at some point after vaulting, long randomly generated from Bitwarden extension/app is easy enough. Ensure you enable strong 2FA at each service you have an account at too.

https://bitwarden.com/help/setup-two-step-login/ https://bitwarden.com/resources/guide-how-to-create-and-stor...

New comment by itscrush in "Ask HN: How did the internet discover my subdomain?"

itscrush — Fri, 07 Mar 2025 16:09:42 +0000

> I am using CloudFlare for my DNS.

Based on this it sounds like you exposed your resource and advertised it for others. Reverse dns, get IP, scan IP.

Probably simpler, you exposed resource on IPV4 publicly, if it exists, it'll be scanned. There's probably 100s of companies scanning entire 0.0.0.0/0 space at all times.

New comment by itscrush in "Another Conflict Between Privacy Laws and Age Authentication–Murphy v Confirm ID"

itscrush — Tue, 04 Mar 2025 02:11:49 +0000

Why isn't your name in your profile here or why aren't you easily identified if that's the case? You're not all that identifiable here.

New comment by itscrush in "Mozilla deletes promise to never sell Firefox data"

itscrush — Fri, 28 Feb 2025 12:41:44 +0000

1. Is github the best place to report bugs / issues for Waterfox?

2. When (not in your lifetime obviously) Waterfox is broken, what canaries do you have deployed that we can archive now, like Mozilla's tell here?

3. What keeps waterfox afloat? Where/how do you accept funds?

4. How do I find a sync alternative or provide my own? Such that, I'm not reliant on Mozilla sync/backend? ... If none exists, how much would it cost for you to embed one? Would you accept a serious bounty for it assuming the focus is self hosted / no Waterfox backend services?

New comment by itscrush in "Apple pulls data protection tool after UK government security row"

itscrush — Sun, 23 Feb 2025 01:26:41 +0000

Veracrypt works just fine on M$ Windows 11 for FDE.

New comment by itscrush in "Egg prices are soaring. Are backyard chickens the answer?"

itscrush — Thu, 20 Feb 2025 15:31:42 +0000

Same play as the meat industry leveraging "data analytics" to fix and sort at https://www.agristats.com/.

[1]https://www.justice.gov/archives/opa/pr/four-states-join-jus...

[2]https://farmaction.us/2023/10/12/food-price-fixing-is-still-...

New comment by itscrush in "Most-Watched Software Engineering Talks of 2024"

itscrush — Wed, 12 Feb 2025 22:53:07 +0000

The security community used to maintain one that was fairly active pre-covid.

https://github.com/PaulSec/awesome-sec-talks

New comment by itscrush in "Perma.cc – Permanent Link Service"

itscrush — Mon, 10 Feb 2025 17:14:02 +0000

Is the best counter here to acquire a brand tld to operate themselves (setting aside all the linkrot it generates)? They've certainly got the resources when you compare against other brand tlds that this could have been an option.

New comment by itscrush in "Perma.cc – Permanent Link Service"

itscrush — Mon, 10 Feb 2025 17:09:49 +0000

The tld it's dependent on doesn't fall within these parameters. They also don't own and operate the .cc TLD do they?

New comment by itscrush in "Firefox removes "do not track" feature support"

itscrush — Tue, 10 Dec 2024 20:18:22 +0000

I think librewolf gets you most of the way there. Just add a sponsorblock extension and check a few extra lists on its built in ubo.

Does the reliance on Firefox ESL or based on Gecko rule this one out?

New comment by itscrush in "Itch.io Taken Down by Funko"

itscrush — Mon, 09 Dec 2024 14:55:32 +0000

Namecheap's been out a while, I'd drop them from your list too. Porkbun's in for now.