cad

https://www.gitguardian.com/files/the-state-of-secrets-spraw...

In the 2025 report, we showed that nearly 70% of credentials confirmed as valid in 2022 were still valid as of January 2025, meaning they have not been rotated or otherwise remediated. When we retested the same dataset in January 2026, the validity rate remained over 64%. That persistence is not a rounding error. It is an operational signal that remediation, not detection, is still the industry’s limiting factor.

In the end there is always some long lived secret. What changes is just where and how it is stored, secured and used.

Obviously. The point here is to reduce the number of them

Don't get me wrong but data shows that you will likely fail to keep that api key a as secret and you will also fail to revoke when it becomes necessary. You will definately not going to rotate it frequently as you should.

Good thing about the OAuth2/OIDC is these things will not put the trust on the bearer of the api key, but on actual identity that needs to have the access.

Money + heat

With nuclino(http://nuclino.com). It's a real time, collaborative markdown wiki.

Put it on Kickstarter :) I would buy one.

does it support firefox?

Ok since nobody asked.. What is the tech stack behind?

evernote kind of apps don't work. Except Google Keep. Keep kinda works.

a favicon would be nice. It's easier to locate the tab that way especially when it's pinned. (firefox users)

Front page is not behind ssl and you can sign up from there. It's easy to change form action target to a malicious url with a simple mitm attack.

Any chance could it be heartbleed?

I guess you mean putting some backing data but without making it too complicated, in an easy-to-understand way. A short and simple but informative page with infographics and everything.

gives 404 error

Google's becoming the new Microsoft.

Another answer would be, "Yeah, because of Twitter's bootstrap."

Why, why, why didn't I break his legs!

sometimes optimizely's cdn doesn't seem responding from Turkey or it goes just haywire. fyi

you can set an arbitrary url like codeshare.io/hackernews instead of the auto-generated value. its like etherpad + socket.im. nice.

For clearance, we didn't put any ads on the video. And we took his directorial comments in account so we are actually shortening the video right now and doing some other improvements on it. Also working on the landing page to display more information about the app itself. But more feedback about the app itself and the concept will be beneficial for us till we update the page.

Right. Thanks for the feedback. The application you've seen in the video is in it's pre-beta stage. We are still working on the ui and some features that we haven't revealed in the video. Those grey boxes are venues, and avatars are your friends. App shows your friends, venues and points of interests (gatherings, events, etc..) on both the map and the camera screen (AR). You can initiate a meetup with your friend(s). When you do that the app will guide you, using the map or the camera screen(AR), to your friend's location; or your friend to your location; or both of you to a mid-point. App also suggests suitable mid-points for a meetup for you to choose. It's golden especially when you are abroad or at a different city.

Thanks for your directorial feedback. Do you actually have anything to say about the concept or the product itself?

This was started as a weekend project. And ended up here. Socket,im is a tool for sharing stuff between parties without hassle. You just type socket.im/something then system creates something what we call a socket. You can send links, messages, images etc via socket.im and anyone who is already connected that socket (by also typing the socket name or if you sent him a link by clicking the link) would receive what you have sent. It's anonymous. Nothing is stored on the server persistently.

Soon we will add file sharing and ssl support.

socket.im is still in its early days so it's something like an alpha version.

EDIT: We will be available at http://socket.im/dev

What is your tech stack?

What do you have at the back-end?

Do you also want ice cream on top?

Same shit happens in Turkey every year. Even the form of the questions are identical. In a sense, people who pass Student Selection and Placement Examination(http://en.wikipedia.org/wiki/Student_Selection_and_Placement...) in Turkey may be the best matches for their work positions, but only in 1860s.