TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Torus – A secure, shared workspace for secrets

120 点作者 sr2将近 8 年前

9 条评论

zimbatm将近 8 年前
As soon as developers have access to the production credentials it&#x27;s game over. Auditability is gone. Passwords end-up being stored in various password stores and plain files because it&#x27;s convenient. Developers connect to the production system and start doing live changes.<p>Hashicorp Vault is more difficult to put in place but it does the right thing. With it&#x27;s custom backend it can generate temporary tokens, for example to access the database. Those token are short-lived and part of the audit log.
评论 #14633327 未加载
评论 #14633181 未加载
评论 #14639615 未加载
评论 #14633419 未加载
评论 #14632994 未加载
TheSwordsman将近 8 年前
Looks interesting. I&#x27;ll definitely take a look at how this compares to Hashicorp Vault. Definitely getting closer and closer to the point where I can start to properly utilize a tool like this.<p>Reading the docs, though, it does seem like it&#x27;s one legendary AWS outage away from being a huge problem:<p>&gt;Torus’s infrastructure has been designed from the ground up for resilience without any single point of failure. All of our services are autoscaled and run in multiple availability zones in the us-east-1 region.
评论 #14639160 未加载
评论 #14636055 未加载
tptacek将近 8 年前
This does not seem any less complicated than Vault or Keywhiz.
momania将近 8 年前
How is using an online service as a starting point for security a good thing?
评论 #14637150 未加载
wyqydsyq将近 8 年前
We&#x27;ve used Torus a fair bit in my team at work, however we&#x27;re now using Docker&#x27;s native secrets solution for our container runtimes as it avoids the knowledge and build-time overhead of an extra dependency.<p>I personally found the experience of using Torus to be great. Getting a quick working setup is easy and it doesn&#x27;t take much effort to transition from there to locked down access control. Will likely continue using it outside of the Docker context.
owaislone将近 8 年前
I&#x27;ve been using Blackbox and it has been great. It encrypts files directly in your VCS. We&#x27;ve setup the deploy pipeline to decrypt secret config files and then deploy to servers.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;StackExchange&#x2F;blackbox" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;StackExchange&#x2F;blackbox</a>
m_sahaf将近 8 年前
Looks interesting. I probably need to get my hands dirty to understand how it&#x27;s different from Hashicorp&#x27;s Vault. A quick glance says it&#x27;s a cloud-based solution with simpler UX. I see only client binaries and sign-up instructions. There are no server setup instructions.
评论 #14633245 未加载
评论 #14633085 未加载
OJFord将近 8 年前
Very strange navigation behaviour: enabled JS, and then clicking e.g. &#x27;Docs&#x27; modifies the URL in address bar, but requires a manual refresh to actually load the docs page...
评论 #14636653 未加载
skrowl将近 8 年前
A shared workspace for secrets as long as none of your friends using Windows, Android or iOS have secrete to share, apparently.
评论 #14637135 未加载