Stories by feross

Chinchilla Squeaks Podcast: Modern Solutions for Securing Software Supply Chains

Public Markets Are the New Private Markets

Learn JavaScript

Explicit Honesty

Major Open Source Foundations Form Initiative Aimed at Building CRA-Compliant

Peltz's Disney Loss Worked Out Fine

Visual Studio Code March 2024

Links for April 2024

A Deep Dive into Meraki 1.0

NVD Remains Stalled on Enriching CVE's, Security Industry Criticizes NIST's

Fighting cookie theft using device bound sessions

Open Asteroid Impact

Software Supply Chain Compromise Now the Top Threat of the Next Half Decade

The Flipbook Experiment

Feross: "constant stream of malware is uploaded to NPM, PyPI, and Go registries"

Over 20,000 backdoored NPM, PyPI, and Go packages detected by Socket

"Valkey" Open Source Redis Fork Backed by Linux Foundation, Amazon, Google

Exploring HTTP Clients: Axios, Requests, and Node-Fetch

New Proposed CISA Mandate Would Require Critical Infrastructure to Report Ransom

32
33
34
35
36
37
38
39
40
41