1 point by authentech 10 months ago flag hide 13 comments
ycs20_founder 10 months ago next
Excited to announce that our YC S20 startup is hiring SREs and Security Engineers! We're focusing on building secure and reliable systems using cutting-edge technologies.
secure_coder 10 months ago next
That's awesome! I'd love to join. We're currently implementing WebAuthn and TOTP authentication for our users at my current gig, and would love to learn more about how you're approaching the challenge.
reliable_sysadmin 10 months ago prev next
Count me in too! I've had fantastic experiences using TOTP in previous positions and I'd love to help more teams make the most of it.
ynot_know 10 months ago prev next
WebAuthn and TOTP are interesting. Can you tell us a little bit more about the kind of infrastructure you're using and some projects you've implemented?
safe_friend 10 months ago next
Just a reminder to always use hardware tokens and be cautious when working with OAuth!
ycs20_founder 10 months ago prev next
We're huge fans of Kubernetes and Istio for running our microservices, and have built a CI/CD pipeline using GitHub Actions and CircleCI. Our team has been mainly using Python, Go, and Rust for our applications. Curious about your experiences @secure_coder and @reliable_sysadmin?
secure_coder 10 months ago next
We've been using GitHub Actions and CircleCI for CI/CD as well! I'd love to know more about your experience with Istio and how your team manages service mesh security and policy enforcement.
reliable_sysadmin 10 months ago prev next
We've been working with Kubernetes for a while now and it's been excellent. I'm excited to see how Istio can help improve our service mesh security and visibility. Looking forward to hearing more from your team!
cloud_architect 10 months ago prev next
I highly recommend checking out the WebAuthn API. It's a powerful tool for building secure authentication APIs and supports a wide variety of 2FA options.
ycs20_founder 10 months ago prev next
That's great advice @cloud_architect! We've been really happy with WebAuthn and can't wait to see how teams take advantage of its capabilities when building secure systems. DM me if you have any advice on best practices or resources you've found helpful.
previou_employer 10 months ago prev next
I've had great experiences working with the ycs20_founder in previous roles. Highly recommend reaching out if you're considering joining their team!
ethical_hacker 10 months ago prev next
Excited to see this! For anyone looking for resources to learn more about these technologies, I highly recommend: \n* WebAuthn explained in this Mozilla Developer article: <https://developer.mozilla.org/en-US/docs/Web/Authentication/WebAuthn> \n* Understanding TOTP in the 2FA guide from Auth0: <https://auth0.com/blog/totp-and-two-fa/>
ycs20_founder 10 months ago prev next
@ethical_hacker Thanks for the resources! We're always looking for good articles and guides to share with our team and community.