400646
results for ""a""
-
It looks like Sigstore and provenance has not landed in composer yet. Or at least not yet as of May. It was still planned as a future thing https://blog.packagist.com/an-update-on-composer-packagist-supply-chain-security/
Zegnat
at
2026-10-08 22:37
-
Huh, had not seen https://platform.openmeet.net/ before. Looks interesting as a meetup alternative
gRegor
at
2026-10-08 22:29
-
I haven't kept up tbh. If there's a better way I'm happy to switch
aaronpk
at
2026-10-08 22:08
-
Is GPG signing still the norm at all? I haven’t done PHP releases in a while. I have seen a lot of node packaging slowly move to attestations instead: ie. Microsoft/GitHub signs that the contents of the release match the contents of the repository so you ensure that the code you see is the code you end up with. Which feels about as trustworthy as a GPG key from an open-source contributor that I also have a hard time verifying anyway.
Zegnat
at
2026-10-08 21:44
-
simpleauthority: Thank you! This looks super interesting! I started implementing it in Rust a few months ago but didn't continue. Could you put your code under an open license so I can ~~steal~~ borrow it?
jak2k
at
2026-10-08 20:58
-
Wikipedia is a step behind. https://en.wikipedia.org/wiki/Orkut as of this minute. Entities asking for signatures and asking to spread the word don't sound all that promising, particularly if their stated goal is to be a “silo but this time it'll be different”
[artlung]
at
2026-10-08 20:50
-
like, what's the high stakes IdP opsec equivalent of a homelab 😆
[snarfed]
at
2026-10-08 20:29
-
yeah I'm kinda looking for a middle ground
gRegor
at
2026-10-08 20:11
-
I want to see if there's a way to use a yubikey for the parent key and sign sub keys with it that live on my computer. That would make it a lot faster to regenerate the sub keys yearly or every other year, and would have similar security properties as an airgapped computer. But this is way off topic for this channel now lol
aaronpk
at
2026-10-08 19:45
-
Dumped my list into a post on my site 😁 https://www.ciccarello.me/posts/2026/10/08/fxdx-feature-ranking/
[aciccarello]
at
2026-10-08 18:58
Sort by:
Filter results by:
Tag
Query took 0.02s.
Search tips
- Exclusion
- +foo -bar
- Logical OR
- foo OR bar
- Exact phrase
- "foo bar"
- Partial words
- foo*
- Particular fields only
- title:foo
- domain:example.org
- nick:somebody
- after:2016-11-23
- before:2016-11-23
- date:2016-11-23