polydawn/mdm
View on GitHub ↗ ★ 64 Java
Modern Dependency Management
5 mentions on Hacker News by 1 person: 0 stories, 5 comments · first 2014-01-13 · latest 2014-11-03
20082026
-
…at it! -- Edited: to also link the wikipedia chart of hash families. -- [1] https://blake2.net/ [2] https://github.com/polydawn/mdm/ [3] http://www.mscs.dal.ca/~selinger/md5collision/ [4] http://web.archive.org/web/20071226014140/http://www…
comment by heavenlyhash · 2014-07-29 · in How to take over the computer of a Maven Central user -
…-- you should just verify the signature at the time you first commit a link to a dependency. [1] https://github.com/polydawn/mdm/ [2] https://www.fortify.com/downloads2/public/fortify_attacking_...
comment by heavenlyhash · 2014-07-29 · in How to take over the computer of a Maven Central user -
…repo trim and the whole thing fast while still giving me end-to-end integrity guarantees. I wrote https://github.com/polydawn/mdm/ to help with this. It goes a step further and puts each binary version in a separate root of history, which…
comment by heavenlyhash · 2014-04-25 · in Facebook's git repo is 54GB -
…actually easier to use that than try to spin up a private docker registry and secure it, etc. [1] http://github.com/polydawn/mdm [2] http://github.com/polydawn/hroot
comment by heavenlyhash · 2014-01-13 · in Docker: The good parts