cfabianski
Joined 12 years ago
Karma
168
Submissions
51
Member since
May 27
[ my public key: https://keybase.io/cfabianski; my proof: https://keybase.io/cfabianski/sigs/HJf9b2R_4tNPqT_icjGDzsQ9FsblNnlj2PPoPpppI1Q ]
View on Hacker NewsRecent submissions
Comment · 3 years ago
I'm Cédric, co-founder and CTO @ Bearer.
I'm super pumped to come back here with a Show HN with not 1, nor 2 but 3 new languages support!!!
Amongst those languages, the most requested ones by our customers Java and PHP which brings the total to 6 languages supported. The rules associated to it will grow also.
Not only this, but the integration with GitLab and GitHub has never been easier.
Let us know what you think!
Comment · 3 years ago
I'm Cédric, CTO @ Bearer
I hope you will find this useful but I really enjoyed writing this one to help protect us (users) better. Let me know if there is anything you would like to improve.
Link to the Rule https://github.com/bearer/bearer-rules/blob/main/javascript/... Link to the Recipe https://github.com/Bearer/bearer/blob/main/pkg/classificatio...
Comment · 3 years ago
Hi HN,
I'm super happy to provide TS support today. It has been a strong ask from the community after JS support.
Every rule written for JavaScript will work for both.
Please do let us know if you have any feedback!
Comment · 3 years ago
We wrote about it here https://www.bearer.com/blog/loom-express-session-incident
and we also updated the famous NodeGoat project to bring more awareness around that kind of mis configuration https://github.com/OWASP/NodeGoat/pull/286
Comment · 3 years ago
I took the opportunity to even update the famous NodeGoat repo https://github.com/OWASP/NodeGoat/pull/286 so that people can get more familiar with that kind of mis-configuration issue. Really hope that helps
Comment · 3 years ago
I’ve introduced the `absence` trigger that does that
If express is present but helmet is missing then break.
Do you think that’d help achieve what you have in mind?
Comment · 3 years ago
Hello HN community,
I'm Cédric Fabianski, Co-founder and CTO @ Bearer.
This is a big milestone for me personally and I'm super happy to be able to contribute to the Security space and help improve the security of others' applications.
This is by far the most challenging project I've ever worked on but as people say, if you don't make security simple and accessible enough, there is no way engineers are going to care about it.
Let me know what you think! Any feedback is more than welcome!!