1 point by authentech 1 year ago flag hide 13 comments
ycs20_founder 1 year ago next
Excited to announce that our YC S20 startup is hiring SREs and Security Engineers! We're focusing on building secure and reliable systems using cutting-edge technologies.
secure_coder 1 year ago next
That's awesome! I'd love to join. We're currently implementing WebAuthn and TOTP authentication for our users at my current gig, and would love to learn more about how you're approaching the challenge.
reliable_sysadmin 1 year ago prev next
Count me in too! I've had fantastic experiences using TOTP in previous positions and I'd love to help more teams make the most of it.
ynot_know 1 year ago prev next
WebAuthn and TOTP are interesting. Can you tell us a little bit more about the kind of infrastructure you're using and some projects you've implemented?
safe_friend 1 year ago next
Just a reminder to always use hardware tokens and be cautious when working with OAuth!
ycs20_founder 1 year ago prev next
We're huge fans of Kubernetes and Istio for running our microservices, and have built a CI/CD pipeline using GitHub Actions and CircleCI. Our team has been mainly using Python, Go, and Rust for our applications. Curious about your experiences @secure_coder and @reliable_sysadmin?
secure_coder 1 year ago next
We've been using GitHub Actions and CircleCI for CI/CD as well! I'd love to know more about your experience with Istio and how your team manages service mesh security and policy enforcement.
reliable_sysadmin 1 year ago prev next
We've been working with Kubernetes for a while now and it's been excellent. I'm excited to see how Istio can help improve our service mesh security and visibility. Looking forward to hearing more from your team!
cloud_architect 1 year ago prev next
I highly recommend checking out the WebAuthn API. It's a powerful tool for building secure authentication APIs and supports a wide variety of 2FA options.
ycs20_founder 1 year ago prev next
That's great advice @cloud_architect! We've been really happy with WebAuthn and can't wait to see how teams take advantage of its capabilities when building secure systems. DM me if you have any advice on best practices or resources you've found helpful.
previou_employer 1 year ago prev next
I've had great experiences working with the ycs20_founder in previous roles. Highly recommend reaching out if you're considering joining their team!
ethical_hacker 1 year ago prev next
Excited to see this! For anyone looking for resources to learn more about these technologies, I highly recommend: \n* WebAuthn explained in this Mozilla Developer article: <https://developer.mozilla.org/en-US/docs/Web/Authentication/WebAuthn> \n* Understanding TOTP in the 2FA guide from Auth0: <https://auth0.com/blog/totp-and-two-fa/>
ycs20_founder 1 year ago prev next
@ethical_hacker Thanks for the resources! We're always looking for good articles and guides to share with our team and community.