Remote

Andreas Olsson

@andreas@mastodon.arrakis.se

mastodon 4.7.3

I work with computers. We mostly get along.

95 Followers

161 Following

8 Posts

Joined October 28, 2022

website:

https://www.andreasolsson.se

irc:

andol @ libera, oftc

Andreas Olsson @andreas@mastodon.arrakis.se

· 8mo ago

About a month ago I moved my email to @soverin@mstdn.social. Having been generally happy with their service, let me share the reasons that I picked them.

* Both the company and their servers reside within reasonably friendly countries.
* Good old-fashioned IMAP+SMTP client support, with individual app passwords.
* Sufficient TLS and DNSSEC that I can require SMTP STARTTLS using both MTA-STS and DANE.
* Powerfull and flexible mail filtering built on top of Sieve.
* Full IPv6 support.

https://soverin.com/

soverin.com

Soverin: Home

Andreas Olsson @andreas@mastodon.arrakis.se

· 7mo ago

A few more photos of a wintery Nynäshamn.

Andreas Olsson @andreas@mastodon.arrakis.se

· 9mo ago

One of the nice things about living in Nynäshamn is that I have this within walking distance from my apartment.

Andreas Olsson @andreas@mastodon.arrakis.se

· 19mo ago

Replying to

@cuu508@toot.lv @healthchecks_io@fosstodon.org In regards to security in general I would like to advice you to consider importing the GitHub App's long-lived private RSA key into something like an HSM, a Cloud KMS, a Vault instance, etc. While that doesn't prevent misuse it at least guards against the key fully leaking.

Andreas Olsson @andreas@mastodon.arrakis.se

· 19mo ago

Replying to

@cuu508@toot.lv @healthchecks_io@fosstodon.org ...which I now see that you have already covered in the issue ticket. Sorry about that.

Andreas Olsson @andreas@mastodon.arrakis.se

· 8mo ago

Yet another #FOSDEM coming up.

Hope to see you there!

Any talks or stands in particular that I don't want to miss out on?

mastodon.arrakis.se

Mastodon

Andreas Olsson @andreas@mastodon.arrakis.se

· 19mo ago

Replying to

@cuu508@toot.lv @healthchecks_io@fosstodon.org So, I've mostly created GitHub Apps for personal usage as well as for work purposes, so I'm a bit fuzzy on the best way to provide onboarding links. Easiest might simply be to use https://github.com/marketplace?type=apps Yet on a conceptual level I really like the GitHub Apps permission model, where you get to add a GitHub App to your account/organization, together with the option of specificity exactly which repos you want to grant the App's access for.

GitHub

Build software better, together

GitHub is where people build software. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects.

Andreas Olsson @andreas@mastodon.arrakis.se

· 19mo ago

Replying to

@cuu508@toot.lv @healthchecks_io@fosstodon.org All good questions regarding the whole onboarding thing, to which I sadly don't have any good answer. What I can tell you is that you definitely want to go with GitHub Apps rather than OAuth Apps. Those OAuth Apps uses the old scary permission scope where permission to create issues requires the full "repo" scope, allowing most form of repo write access. Also, an OAuth App (kind of) gets access to all the repositories the approving user has access to.