Viewing profile — legobeet

I'm going the container route. To get the full seamlessness you're alluding to (easily switch between multiple parallel environments; easy migrations) still requires some additiona…

In a similar vein but still containers and a bit more targeted: http://github.com/legobeat/l7-devenv I daily-drove NixOS for a few years and philosophically very much vibe with the…

A defense-in-depth approach with a special eye to compartmentalization/separation/sandboxing coupled with principle-of-least privilege is a good stance to take, I think. Also keep …

What I am proposing is something you'd run on your independent workstation to interface with existing heterogeneous services and peers. While you certainly can run Vault and Bounda…

Sure, but they are only usable as such if attackers also maintain access to the proxy and stay under the radar. Additionally, the proxy has logging and hooks for monitoring so you …

The next step is to actually use underprivileged canary tokens on the client for your day-to-day work, intercept them with a proxy, and replace them with the real deal in a more is…

mprocs is worth checking out! https://github.com/pvolok/mprocs

Here's a batteries-included local-first dev-environment which does that in order to compartmentalize your credentials: https://github.com/legobeat/l7-devenv Something like Lokal mi…

The security side of free editors and IDEs is not great anywhere today for JS development. Once you start wanting more features and integrations, you start facing an apparent choos…

Hi HN, l7-devenv, or `de` for short[0], is a containerized terminal-based IDE using rootless Podman, neovim and friends, and proxying of network requests and sockets. IMO, the secu…