Hacker News: mdean

New comment by mdean in "SHA pinning GitHub Actions across an organization"

mdean — Thu, 13 Aug 2026 19:51:42 +0000

Disclosure: I work at Semgrep but figure other engineers may find the approach we used interesting.

SHA pinning GitHub Actions across an organization

mdean — Thu, 13 Aug 2026 19:51:42 +0000

Article URL: https://semgrep.dev/blog/2026/sha-pinning-for-github-actions-org-wide/

Comments URL: https://news.ycombinator.com/item?id=49291030

Points: 8

# Comments: 2

New comment by mdean in "Useful built-in macOS command-line utilities"

mdean — Wed, 06 Nov 2024 20:28:41 +0000

https://www.arno.org/on-the-origins-of-ds-store linked from original Hacker News thread: https://news.ycombinator.com/item?id=40870357

New comment by mdean in "Ask HN: Who wants to be hired? (November 2024)"

mdean — Mon, 04 Nov 2024 22:57:06 +0000

Location: San Francisco

Remote: Prefer hybrid, open to remote

Willing to relocate: No

Technologies: Python, JavaScript, C++, Qt, Node.js, React, HTML, CSS, Lua, HTTP, Nginx, MySQL, Rust, Web Extensions

Résumé/CV: https://www.matthewdean.com/resume.pdf

Email: contact@matthewdean.com

Interested in product/eng roles in dev tools and security

New comment by mdean in "Why anti-cheat software utilizes kernel drivers (2020)"

mdean — Wed, 30 Oct 2024 23:14:30 +0000

I think this post is addressing some of the weaker security arguments against putting anti-cheat software in the kernel. The issue isn't that such software provides no value (obviously it does if developers continue writing anti-cheat kernel drivers despite the backlash). The issue is that software running in the kernel can unintentionally enable vulnerabilities that would be impossible if the software was running in usermode. It doesn't require compromising any supply chains.

New comment by mdean in "My Ivy League school is threatening to suspend me if I don't shut down mystartup"

mdean — Thu, 30 May 2024 19:03:18 +0000

Did the university indicate what part of the code of conduct they believe you've violated? Might be worth reading through that document.

Installing Tailscale on Asus RT-AX86U Router for a Free Home VPN

mdean — Thu, 09 May 2024 07:46:15 +0000

Article URL: https://www.matthewdean.com/tailscale-on-asus-router

Comments URL: https://news.ycombinator.com/item?id=40306161

Points: 4

# Comments: 0

New comment by mdean in "Ask HN: Those of you who don't use AWS/Azure/GCP, what do you use for hosting?"

mdean — Wed, 01 May 2024 02:50:52 +0000

I would highly recommend DigitalOcean (https://www.digitalocean.com/) - they started with a simple VPS offering but have expanded over time. I've been using them since 2013 for hosting personal site/small projects and they are highly reliable, communicative about any maintenance requiring downtime and transparent about pricing.

Feel free to check them out. If you want I can send you my referral link.