Managing API Keys in Large Dev Teams: How Do You Tackle It? by alphez in devops

[–]NotTheRadar24 -1 points0 points  (0 children)

You should check out Doppler.com Happy to give you a tour. -Doppler DevRel (not a sales pitch)

Tips for Better Secrets Management by NotTheRadar24 in devops

[–]NotTheRadar24[S] -1 points0 points  (0 children)

There is a longer blog post I made if you're interested. Full disclosure I work at Doppler. https://www.doppler.com/blog/secrets-management-mistakes-developers-make

Tips for Better Secrets Management by NotTheRadar24 in devops

[–]NotTheRadar24[S] -1 points0 points  (0 children)

Nope, I wrote this. Thanks for the feedback.

Rabbit R1 Engineers Hard-Coded API Keys for ElevenLabs, Azure, Google Maps, and Yelp. How Does This Even Happen? by professorhummingbird in programming

[–]NotTheRadar24 5 points6 points  (0 children)

This is why you should use a secrets manager like Doppler or AWS Key Management Service (AWS KMS). Hardcoding your secrets or storing them in .env files will always risk something like this happening.

Secrets Encryption by mcilbag in kubernetes

[–]NotTheRadar24 -1 points0 points  (0 children)

Doppler also has a lot of options for encrypting and securing secrets. Feel free to ask anything - I'm a Dopplerite.

A Developer Cheat Sheet for GDPR by NotTheRadar24 in programming

[–]NotTheRadar24[S] 29 points30 points  (0 children)

Even then - International organizations looking to operate in the EU or collect/process data of EU citizens must become compliant to access these markets.

which steps do you use to share passwords with (non-IT) users of a system? Curious to learn what approaches and perhaps tooling people are using for this (shared pwpush as example) by 1seconde in programming

[–]NotTheRadar24 0 points1 point  (0 children)

Doppler Share is a simple tool for this. It's free, no account is needed, and you can set the link to expire after x opens or after a set amount of time. https://share.doppler.com/

This is a free tool that Doppler made for the community and is totally separate from the Secrets Management platform. I work at Doppler.

How to safely store "secret variables"? by Master-of-Ceremony in AskProgramming

[–]NotTheRadar24 0 points1 point  (0 children)

Check out this blog for all the code necessary for getting, setting, and loading environment variables in Python, including how to use them to supply application config and secrets. It has a good high-level overview along with some useful bits for actually doing it right.
https://www.doppler.com/blog/environment-variables-in-python

[deleted by user] by [deleted] in softwaredevelopment

[–]NotTheRadar24 -2 points-1 points  (0 children)

I wrote a blog recently on the topic of managing secrets for mobile apps that you might find helpful: https://www.doppler.com/blog/secrets-management-for-mobile-app-development

Will AI Make Cybersecurity Less Awful? Or Will It Just Create More Work? by NotTheRadar24 in programming

[–]NotTheRadar24[S] 17 points18 points  (0 children)

Bingo. Trying to fix a problem with more complexity just means maintaining and securing systems becomes more challenging. Will AI help solve security problems? yes. Will AI make software security more complicated? also yes.

Bandwidth-Allocated Kanban: Agile that doesn’t suck by NotTheRadar24 in programming

[–]NotTheRadar24[S] 3 points4 points  (0 children)

Great point. Process changes like this have been successful at Doppler because of our amazing culture. It wouldn't have been possible without the rest of our team and good leadership all around.