Hacker News: somethingnew

New comment by somethingnew in "Ask HN: Who is hiring? (September 2026)"

somethingnew — Tue, 01 Sep 2026 18:16:56 +0000

Discord | Senior Software Engineer, Application Security | San Francisco, CA | ONSITE | $280K–$330K TC

Discord is where communities and friend groups spend time together, on desktop, mobile, and now more and more inside games and third-party apps built on our platform. That surface area, plus a huge, engaged, occasionally adversarial user base, makes application security a genuinely hard and interesting problem here.

We're hiring a Senior Application Security Engineer to join the Product Security team. Responsibilities include threat modeling and secure design review with product and platform teams, building and improving AppSec tooling (SAST/DAST/dependency scanning), and working directly with engineering teams to remediate findings.

Stack: Python primarily, some TypeScript/React, some Rust, occasional JavaScript. Runs on GCP.

Looking for: hands-on AppSec experience (not just compliance-flavored security), comfort reading and reviewing code across languages, and sound judgment on prioritizing real risk over checklist security.

Interview process: recruiter call, coding round, HM interview, virtual onsite, decision.

Apply: https://job-boards.greenhouse.io/discord/jobs/8656854002

Roost Announces Coop and Osprey: Open-Source Trust and Safety Infrastructure

somethingnew — Mon, 21 Jul 2025 17:57:36 +0000

Article URL: https://discord.com/blog/roost-announces-coop-and-osprey-free-open-source-trust-and-safety-infrastructure-for-the-ai-era

Comments URL: https://news.ycombinator.com/item?id=44638279

Points: 3

# Comments: 0

Access: A New Portal for Managing Internal Authorization

somethingnew — Wed, 27 Mar 2024 20:50:53 +0000

Article URL: https://discord.com/blog/access-a-new-portal-for-managing-internal-authorization

Comments URL: https://news.ycombinator.com/item?id=39844442

Points: 2

# Comments: 0

Show HN: A SimpleCSPM for Auditing Google Cloud with Google Sheets

somethingnew — Mon, 03 Jan 2022 17:33:40 +0000

Article URL: https://simplecspm.com//

Comments URL: https://news.ycombinator.com/item?id=29783471

Points: 1

# Comments: 0

Google Project Zero: Ghostscript -dSAFER stopped working

somethingnew — Sat, 01 Oct 2016 06:16:06 +0000

Article URL: https://bugs.chromium.org/p/project-zero/issues/detail?id=956

Comments URL: https://news.ycombinator.com/item?id=12616715

Points: 2

# Comments: 0

ActionCable under stress: fixing data corruption and socket leak issues in Rails 5

somethingnew — Fri, 08 Jul 2016 17:49:59 +0000

Article URL: https://blog.phusion.nl/2016/07/07/actioncable-under-stress-p1/

Comments URL: https://news.ycombinator.com/item?id=12057366

Points: 1

# Comments: 0

Twitter's DistributedLog

somethingnew — Tue, 10 May 2016 03:37:46 +0000

Article URL: https://twitter.github.io/distributedlog/html/index.html

Comments URL: https://news.ycombinator.com/item?id=11665007

Points: 4

# Comments: 0

New comment by somethingnew in "Understanding and Hardening Linux Containers [pdf]"

somethingnew — Thu, 21 Apr 2016 01:14:12 +0000

Here's a summary from the Docker perspective https://blog.docker.com/2016/04/docker-security/

New comment by somethingnew in "Show HN: Hacker News Tab"

somethingnew — Tue, 27 Oct 2015 16:46:51 +0000

Source: https://github.com/somethingnew2-0/hacker-news-tab

Show HN: Hacker News Tab

somethingnew — Tue, 27 Oct 2015 16:46:19 +0000

Article URL: https://hacker-news-tab.herokuapp.com/

Comments URL: https://news.ycombinator.com/item?id=10459260

Points: 2

# Comments: 1

Filet-o-Firewall: A vendor agnostic UPnP vulnerability

somethingnew — Tue, 01 Sep 2015 00:09:54 +0000

Article URL: http://www.filet-o-firewall.com/

Comments URL: https://news.ycombinator.com/item?id=10149905

Points: 3

# Comments: 0

New comment by somethingnew in "Re: Proposed Statement on "HTTPS everywhere for the IETF""

somethingnew — Fri, 05 Jun 2015 07:12:40 +0000

Besides Session IDs and Session Tickets[1] which already exist in the TLS protocol. He could be referring to the Token Binding Protocol Draft[2] which, quoting from it's summary, "allows client/server applications to create long-lived, uniquely identifiable TLS bindings spanning multiple TLS sessions and connections".

[1] https://en.wikipedia.org/wiki/Transport_Layer_Security#Resum...

[2] https://tools.ietf.org/html/draft-ietf-tokbind-protocol-01

Square open sources Keywhiz

somethingnew — Tue, 14 Apr 2015 17:17:42 +0000

Article URL: https://github.com/square/keywhiz

Comments URL: https://news.ycombinator.com/item?id=9375764

Points: 8

# Comments: 1

Keywhiz: A system for distributing and managing secrets

somethingnew — Tue, 14 Apr 2015 17:17:13 +0000

Article URL: https://square.github.io/keywhiz/

Comments URL: https://news.ycombinator.com/item?id=9375758

Points: 3

# Comments: 0

New comment by somethingnew in "GRPC: A high performance, open source, general RPC framework"

somethingnew — Fri, 27 Feb 2015 05:54:28 +0000

Not having to worry about calculating the length of the message before transferring it?

FCC chairman mocks industry claims that customers don’t need faster Internet

somethingnew — Fri, 30 Jan 2015 06:05:35 +0000

Article URL: http://arstechnica.com/business/2015/01/fcc-chairman-mocks-industry-claims-that-customers-dont-need-faster-internet/

Comments URL: https://news.ycombinator.com/item?id=8970666

Points: 5

# Comments: 2

New comment by somethingnew in "[dead]"

somethingnew — Tue, 27 Jan 2015 19:24:33 +0000

How does it work? Brute force? Rainbow tables?

New comment by somethingnew in "Online Storage Provider Box Prices I.P.O. at $14 a Share"

somethingnew — Fri, 23 Jan 2015 01:00:22 +0000

My university uses them for file storage and sharing, so I imagine they have many large enterprise clients.

U.S. Puts New Focus on Fortifying Cyber Defenses

somethingnew — Mon, 05 Jan 2015 05:25:37 +0000

Article URL: http://www.wsj.com/articles/u-s-puts-new-focus-on-fortifying-cyber-defenses-1419553122

Hacker News: somethingnew

New comment by somethingnew in "Ask HN: Who is hiring? (September 2026)"

Roost Announces Coop and Osprey: Open-Source Trust and Safety Infrastructure

Access: A New Portal for Managing Internal Authorization

Show HN: A SimpleCSPM for Auditing Google Cloud with Google Sheets

Google Project Zero: Ghostscript -dSAFER stopped working

ActionCable under stress: fixing data corruption and socket leak issues in Rails 5

Twitter's DistributedLog

New comment by somethingnew in "Understanding and Hardening Linux Containers [pdf]"

New comment by somethingnew in "Show HN: Hacker News Tab"

Show HN: Hacker News Tab

Filet-o-Firewall: A vendor agnostic UPnP vulnerability

New comment by somethingnew in "Re: Proposed Statement on "HTTPS everywhere for the IETF""

Square open sources Keywhiz

Keywhiz: A system for distributing and managing secrets

New comment by somethingnew in "GRPC: A high performance, open source, general RPC framework"

FCC chairman mocks industry claims that customers don’t need faster Internet

New comment by somethingnew in "[dead]"

New comment by somethingnew in "Online Storage Provider Box Prices I.P.O. at $14 a Share"

U.S. Puts New Focus on Fortifying Cyber Defenses

Fast code deployments with Docker