New Show Hacker News story: Show HN: Coder Guard – Protect Your IDE from Malicious Extensions

Show HN: Coder Guard – Protect Your IDE from Malicious Extensions
3 by itsamy | 0 comments on Hacker News.
There is a growing problem with VSCode extensions: - they're not sandboxed (yet) - just like double-clicking an .exe file - they don't have a permission model - they auto update - they have built-in persistence - they are installed on developer machines with high-value credentials The recent CircleCI and LastPass incidents were both suspected to originate from a compromised developer machine - which is becoming every organization's Achilles heel in terms of cyber posture So I've been working on a way to help mitigate some of these risks Right now, only an MVP of a "CLI" is available: $ code --list-extensions --show-versions | curl --data-binary @- https://ift.tt/LiGnwIp Which will list your installed extensions with some enriched information to vet their trustfulness But much more detailed threat intel will be shown in the upcoming website and extension, including - Behavioural data gathered from running the extension on an instrumented sandbox environment - The ability to define policies to allow or block extension installs/updates, based on your specific risk appetite For updates, sign up at https://coderguard.io or follow https://twitter.com/coderguard The reason I'm posting this now is because I'd like to get some feedback in order to course-correct to make sure what I build actually solves people's problems I'd be happy to read any comments, or answer any questions

Comments

Post a Comment

Popular posts from this blog

New Show Hacker News story: Show HN: Natural language Twitter search using Codex

Show HN: Natural language Twitter search using Codex 3 by andyk | 0 comments on Hacker News. We built a structured search engine for Twitter called Bird SQL, available at https://ift.tt/7BU0hHb . Our search interface uses OpenAI Codex to translate natural language to SQL. Our backend then verifies the SQL, executes it, and displays the results on the web app. This makes large structured datasets like a scrape of Twitter easy for anyone to explore. As background, while working on text-to-SQL as a general problem, we came to believe one of its most powerful applications is as a search tool because: - SQL is hard to write by hand and prone to errors - It allows you to iterate quickly if you’re exploring a new dataset - A lot of contextual information that you’d normally have to internalize (e.g. your data’s schema) can be automatically generated and offloaded to the language model Using large language models (LLMs) like Codex to write the SQL for you means you don’t have to worry about
Read more

Internet Download Manager Universal Crack is Here ! [IDM 6.25 Build 10 UPDATED]

Image
Internet Download Manager Universal Crack Internet Download Manager aka IDM developers release a new build of  their well-known Download  Accelerator; Internet Download Manager  regularly. So everybody who uses pirated versions get so  pissed off that they have to find a new version of crack every time when an IDM update comes. So  we made a really awesome fix for that An Universal Web Crack. A new era in scene world. Web crack is a new concept of cracks that download and update crack content as the target program gets updated.  So whenever IDM releases a new version. Update your crack using built-in updater and apply crack. Easy as that ! You can simply trust crack because it has a history of more than 3 year with regular updates, and also it has more than 10000K worldwide downloads. How to Crack any IDM Version ? Install the latest version of IDM / Or update via quick update (yes its possible now)  Turn off any virus guards Download and 
Read more

New Show Hacker News story: Show HN: Movis – A Video Editing Library in Python

Show HN: Movis – A Video Editing Library in Python 2 by rezoolab | 0 comments on Hacker News. Originally, this library was created due to my motivation to make videos in Python. Of course, I considered other Python libraries, but I decided to create a new library for video editing because I needed the following features and also for study purposes: - The existence of composition. Especially, the ability to perform advanced video editing by inserting compositions within compositions. - The ability to add animations based on keyframes. - Effects like chroma key and drop shadow. - A caching mechanism to render the same frame quickly. - Various blending modes. These features, despite being standard in proprietary video editing software, were not present in previous Python libraries. Currently, I am using this library to automatically generate videos from raw materials. I would be grateful for any comments, thoughts, or requests.
Read more