Trying out fetchrss.com to get RSS for sites that lack native RSS because especially in these AI-times it’s baffling how many sites are lacking RSS (and goes to show that vibe-coding is no replacement for knowing _what_ to do, it’s just a way to write out the code that _does_ it)
RSS Generator - FetchRSS
Online RSS feed generator. Create RSS for any website. Pick a content you are interested in. Get RSS generated by your rules.
fetchrss.com
We've just updated the SteamOS installation image to 3.8. This update improves compatibility with certain modern systems and includes a first-time setup. help.steampowered.com/en/faqs/view... If you have an AMD GPU, you can build your own Steam Machine now! More GPU support being worked on.
Very well done and scarily eye opening!
Mysk 🇨🇦🇩🇪 @mysk.bsky.social · 2mo agoIntroducing Loupe, our latest privacy app for iOS. Discover what apps can learn about you just by reading data your iPhone already exposes, such as your languages, installed apps, device sensors, and much much more. Loupe is free, private, and open source. Try it👇 apps.apple.com/app/id676615...
Today I gave a talk JSNation about the life cycle of ESM in Node.js, how it differs in other environments and the new features that will affect these stages. Slides: github.com/joyeecheung/...
github.com
Today is a big day for @socket.dev. We raised a $60M Series C at a $1B valuation, led by Thrive Capital. 20,000+ orgs, 1.5M repos protected, 1,000+ supply chain attacks blocked per week. 3/5 FAANG companies are customers. We're just getting started.
🚨 node-ipc is compromised again. Three malicious versions (9.1.6, 9.2.3, 12.0.1) published via expired-domain account takeover. Payload steals credentials, SSH keys, cloud tokens, .env files and exfils over DNS. Socket flagged them as malware within 3 min. Details: socket.dev/blog/node-ip...
Popular node-ipc npm Package Infected with Credential Steale...
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
socket.dev
. @socket.dev just acquired @secureannex.com, the extension security company built by @johntuckner.me. John is joining Socket. John built Secure Annex as a solo founder into a product that security teams at Reddit, Brave, Torq, and Movable Ink depend on.
I tried this out again recently. It’s a cool feature but it requires EVERY dep to be exceeding well behaved and defined. It also relies on NODE_PATH and has weird issues with esm. Unfortunately something like this needs a runtime solution to work generally.
patak@patak.cat · 4mo ago@pnpm.io's experimental global virtual store is brilliant. The install performance gains are a game-changer for git flows. You get near-zero per-worktree overhead and instant installs for new worktrees as packages are already in the global store. @kochan.io can't stop making pnpm better 🤌
@pnpm.io's experimental global virtual store is brilliant. The install performance gains are a game-changer for git flows. You get near-zero per-worktree overhead and instant installs for new worktrees as packages are already in the global store. @kochan.io can't stop making pnpm better 🤌
And this is what that app contained. (Thankfully I never ran it)
Axios maintainer confirms the npm compromise was caused by a targeted social engineering attack that led to full access to his GitHub and npm accounts. Open source maintainers continue to be high-value targets in supply chain attacks. socket.dev/blog/axios-m...
Axios Maintainer Confirms Social Engineering Attack Behind n...
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
socket.dev
If it’s anything like what they attempted with me then a new modus operandi is to create social credibility and even group pressure, then have a planned video call on a faked version of a real streaming service, then show credible errors and urge to download a native app. This is what I got:
Socket@socket.dev · 4mo agoAxios maintainer confirms the npm compromise was caused by a targeted social engineering attack that led to full access to his GitHub and npm accounts. Open source maintainers continue to be high-value targets in supply chain attacks. socket.dev/blog/axios-m...
Whats your favorite SaaS subscriptions/billing/invoicing reference implementation?
+1 to all this. More-or-less the same experience even. Very open to things. If anyone is hiring.
Chad@chadtmiller.com · 7mo agoserious question: is anyone hiring? open to connecting. 10+ years of full stack experience plus 1 year of unhinged ai/atproto hacking
I mini-racked my network. Next step is to fit the orange case into 1U somehow.
Why doesn’t anyone sell a charging cubby optimized for horizontal slots. They are all vertical.
Anyone have old Mac minis they have sitting around and want to sell me?
We’re system architects at core. We built a decentralized network so you could run your own moderation, but beyond that our upcoming healthy discourse project is taking some swings at the interaction model that drives these dynamics on Bluesky. Excited to start seeing it in action.
Maintainer compromises used to be rare. Now they’re happening at an alarming rate, as seen in recent attacks. Today we’re giving developers a new layer of defense with Socket Firewall, a free tool that blocks malicious dependencies at install time.
🚨 Open source supply chain attacks are exploding. Starting today, that ends. We’re releasing Socket Firewall — FREE, zero-config, CLI that blocks malware before it lands on your laptop or CI. Just run: npm i -g sfw sfw npm install lodash Works for: npm, yarn, pnpm, pip, uv, and cargo.
Anyone know a good leader election library that either uses pg or redis on the backed? Basically, in a horizontally deployed service, I need one instance to do something unique, and something else to take over when it disappears.