techhub.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A hub primarily for passionate technologists, but everyone is welcome

Administered by:

Server stats:

4.6K
active users

#DevSecOps

22 posts19 participants0 posts today

🔒 스타트업에게도 ‘진짜 보안’이 필요합니다.
쿼리파이 커뮤니티 버전을 누구나 1년간 무료로 사용할 수 있도록 공개했습니다 (사용자 최대 5명 활성화 가능).
다음 환경의 접근 제어를 한 플랫폼에서:
✔️ SQL 데이터베이스
✔️ 서버 (Linux/Windows)
✔️ Kubernetes 클러스터
✔️ 내부/외부 웹 애플리케이션
이미 한국 유니콘 스타트업의 80%가 사용 중인 보안 기술을,
이제 누구나 쉽게 시작하실 수 있습니다.
우리는 마케팅보다 기술의 공공성을 먼저 생각합니다.
지금 필요한 보안을, 누구나 누릴 수 있도록.
📦 커뮤니티 버전 설치 가이드: querypie.com/resources/learn/d
🔗 AI Hub 가입: app.querypie.com/login

보안은 가진 사람들의 특권이 아니어야 합니다.
그래서 저희는 쿼리파이 커뮤니티 에디션을 1년간 무료로 제공합니다.
(최대 5 활성 유저, 셀프호스팅 방식)
👨‍💻 제어 가능한 환경:
– SQL 데이터베이스
– 서버 (Linux/Windows)
– 쿠버네티스 클러스터
– 웹앱 (내부 시스템, SaaS)
Docker로 설치하고 바로 시작.
한국 유니콘 스타트업 80%가 이미 사용 중인 기술입니다.
이제, 누구나 사용할 수 있도록 열었습니다.
📦 설치 가이드: querypie.com/resources/learn/d
#보안 #쿼리파이 #DevSecOps #스타트업도구 #공공기술

How Accurate Is AI at Fixing IaC Security Flaws? 🤔

This article puts leading AI models to the test, benchmarking how they remediate real-world IaC vulnerabilities. Many models miss the mark—not from lack of power, but focus.

The takeaway? AI works best with clear context and a tight scope.

Read from our friends at Symbiotic Security → buff.ly/0xTl47W

At AppSec Village, we’re always sharing technical insights for our community. 💙

⁉️ How do global tech organizations identify and close their tech teams' cybersecurity skill gaps?

They use the Cybersecurity Skills Framework — built for technical roles.
🔹 DevOps, SREs, AppDev, Architects and more
🔹 Skills mapped to each role and experience level
🔹 Practical, customizable, easy

📺 Watch our on-demand webinar, "Cybersecurity Skills: A Framework That Works," to learn more: training.linuxfoundation.org/r

Linux Foundation - EducationCybersecurity Skills, Simplified: A Framework That WorksLearn you can leverage the cybersecurity skills framework for you team

Between hundreds of kernel knobs, pluggable LSMs, systemd worming into everything, and a userland mashup of dbus, glibc, and 50 other daemons...
is it even realistic to secure a modern Linux box anymore?

Compare that to OpenBSD or a tight FreeBSD jail — where the surface area is minimal and sane by default.

🧠 Is “do one thing well” security dead on Linux?

Let’s talk attack surface, patch fatigue, and whether “hardening” just means hoping no one finds the hole.

Leaked and Loaded: DOGE’s API Key Crisis

One leaked API key exposed 52 private LLMs and potentially sensitive systems across SpaceX, Twitter, and even the U.S. Treasury.

In this episode of Cyberside Chats, @sherridavidoff and @MDurrin break down the DOGE/XAI API key leak. They share how it happened, why key management is a growing threat, and what you should do to protect your organization from similar risks.

🎥 Watch the video: youtu.be/Lnn225XlIc4

🎧 Listen to the podcast: chatcyberside.com/e/api-key-ca

🚀 First working Redis with post-quantum mTLS using Falcon (NIST finalist) — running in a hardened Alpine container with OpenSSL 3.3.4 + oqs-provider.
⚙️ Falcon keys + certs generated inside the image, Redis launched via --tls-port, and PONGs confirmed via PQ mTLS.

📦 GitHub: github.com/zenthracore/zen.red
🐳 Docker: hub.docker.com/r/zenthracore/z

💡 This might be the first public Redis instance running on PQ crypto.

#PQC#Falcon#Redis