Security Mirco

Head of Security @dash0hq /@ona_hq (formerly Gitpod) alumnus / @Instanahq alumnus / opinions are my own

[Security Mirco @SecurityMirco]

How does one reach out to @Atlassian to ask why @loom users can't login anymore, while the support email is discontinued and the contact form does not even recognize loom as a valid product/URL?

[Security Mirco @SecurityMirco]

@leodido Don't tell your security team 😄

[𝕃𝕖𝕠 𝔻𝕚 𝔻𝕠𝕟𝕒𝕥𝕠 @leodido]

Containers couldn't think. AI Agents can.
That changes everything.

[Johannes Landgraf @jolandgraf]

Gitpod is now @ona_hq. Same people, different name, bigger ambition.

Today, we're launching the mission control for your personal team of autonomous SWE agents.

[Security Mirco @SecurityMirco]

@AccidentalCISO That smile. That damned smile. :D

[Johannes Landgraf @jolandgraf]

Yesterday, we signed a seven figure contract, growing our enterprise revenue 10x since last year.

Today, we launch our Act 2: Gitpod Flex. We want to give you all the building blocks to automate your software development lifecycle, starting with development environments.

Here is what you get.

-Automations: programmable tasks and services triggered on events unique to development environments
- Gitpod Desktop: bringing cloud development environments to your laptop, starting with Mac
- Runners: self-host in your cloud in three minutes
- Dev Container: for base images, tools, and extensions
- Zero-trust environments: ‘never trust, always verify’ every actor and service

Try it for free in early access, no waitlist.

[Security Mirco @SecurityMirco]

My repo is private now, right? RIGHT? https://t.co/8EGI2uXZaQ

[Christin @christinfrohne]

Check out my portfolio to see some of my past work: https://t.co/dBnToji4hz

Looking forward to the next chapter!

[Security Mirco @SecurityMirco]

Striking the balance isn't as challenging as it seems!

Read more about it here: https://t.co/X1JwKFBpq3

[Security Mirco @SecurityMirco]

“There is sometimes a perceived conflict between security and usability” ... sometimes? Can you get both for your dev environments?

[Security Mirco @SecurityMirco]

@Shyim97 @feross Think one can always argue but with CDEs you can get a central place to manage your entire setup vs having it distributed across several devices and having everyone individually responsible to maintain it.

[Security Mirco @SecurityMirco]

Available on Spotify https://t.co/LOcsPrAnRL and Apple Podcast https://t.co/03OCGxLIWj 🎧

[Security Mirco @SecurityMirco]

🛡️ Starting a security compliance journey in a startup? It's like navigating a wild, uncharted land. Together with Lars Kamp , we've mapped out a 5-step framework to anchor your first 90 days with solid security foundations. Find the podcast below 👇 #SecurityCompliance

[Feross @feross]

The `xz` package backdoor is just the tip of the iceberg.

There's a CONSTANT low-level stream of malware and spyware being uploaded to npm, PyPI, and Go registries.

I want to share a few examples from the 20,000+ malicious packages we detected so far:

[George Tsiolis @gtsiolis]

Last year, we launched a self-hosted, single-tenant deployment of @Gitpod designed to address the needs of customers with robust security and compliance requirements, Gitpod Dedicated.

Enterprise-grade security and the most powerful version of Gitpod yet.

→ Deployed in your AWS cloud region, for stronger security and resource isolation with air gap support. 🛡️
→ Managed by Gitpod, for getting the latest software features and security updates without maintenance overhead. 🛟

Starting this week, you can now request the CloudFormation template to deploy and trial Gitpod Dedicated in your AWS cloud. ↓

[Security Mirco @SecurityMirco]

For our startup, it’s been crucial to build a solid product and have reliable processes that meet industry standards. Despite being a young company, we’ve managed to run a mature program and deliver yet another solid report. Big shoutout to the entire team for making it happen!

[Ona @ona_hq]

We’re proud to share that we have completed our second SOC 2 Type II audit!

This certification reflects our dedication to top-tier security solutions. Big thanks to our team and clients for their invaluable support! 🥳

Learn more about Security at Gitpod: https://t.co/hR0cfC0gBN

[Pauline P. Narvas @paw_lean]

To all my friends, mutuals and community in 🇩🇪, I'm looking for space to host a @gitpod community meet-up next month: April 12th in Munich and April 13th in Berlin.

RTs appreciated. Danke! 🫶🍊

https://t.co/5A5CDHxKR2

[Security Mirco @SecurityMirco]

@GeoffreyHuntley @snyksec @GeoffreyHuntley 2022.11.2.16 is the installer version of the November release with security fixes. The installer in general is still in use internally and thus maintained.

[Ona @ona_hq]

"We would like to praise Gitpod for their fantastic turnaround on addressing this security vulnerability, and look forward to presenting more of our findings on cloud-based remote development solutions in the near future."

Read more on @snyksec's blog 👉
https://t.co/2TOE6ocOpb