>ARCHIVE: 1/1/24 >spotted by: thikas_shitus; >bleaching field community centre & library; >56.000456,-2.520825; 1434hrs

something, something software supply chain security cc: @mikeneeds.rest @mauilion.dev

I can't get enough of the new Massive Attack/Tom Waits collab. youtu.be/kVTVWRaAImM?...

Boots on the Ground

YouTube video by Massive Attack - Topic

youtu.be

Anyone else notice the Project Glasswing announcements feel like grindhouse marketing? "Banned in 40 countries" "Results so shocking..."

"You raise your voice, I erase your voice." ICE in Minneapolis are erasing your rights. Please share our new video of what's happening in our city. youtu.be/W1dyNcRGRXY

amazing how the entire machine can pivot within 24 hours. no need to slowly upsell the argument; just issue new marching orders

So when the aurora borealis is faint enough, you can capture its glow with the Milky Way 😍 Berthoud Pass, CO last night

I had a run in with ICE snatching a man out of his car while walking my children to school this morning in NW DC I asked a neighbor to continue walking my kids to school and I turned back to document and confront the ICE agents. I am in contact with @dcmigrantmutualaid.org with the full video.

The global push for #SBOM standards is reshaping how we approach cybersecurity and transparency. 🌍 Explore how the EU #CRA, CISA, and @OpenSSF efforts are aligning global software supply chain security. openssf.org/blog/2025/10...

How to contribute your first line of code to open source? Contributing to the OpenSSF #community isn’t just about code, it’s about building trust, learning how secure software is built, and growing your career. Read the blog and take your first step: openssf.org/blog/2025/08...

The usefulness of an open source project is not an indication of the project's health, stability, or reliability in production!!!! AHHHHHHHHHHHHHHHHH

I was interviewed recently about Kusari's new security PR bot. Check it out!

Startup Embeds AI Security Analysis in Dev Workflow

Kusari Inspector analyzes dependencies and code changes during pull requests, providing devs with actionable go/no-go recommendations before code merges.

thenewstack.io

I recently wrote my thoughts on why we should focus more on securely consuming open source than trying to enforce the trustworthiness of devs mikeneeds.rest/license-to-n... Since some folks aren't familiar with satire, this is satire, this is tongue in cheek, please don't take this too seriously :).

The new #Cybersecurity Skills Framework maps 14 core job roles to real-world security skills. ✅ Built by practitioners ✅ Easy to customize ✅ Standards-aligned 🔗 Launch the free tool: cybersecurityframework.io 📰 Read more: openssf.org/press-releas...

Giant Bomb lives! Fandom has sold the site to us and it is now fully independent and employee-owned. We'll see you all on Tuesday for the Giant Bombcast. For more info right now, head over to www.giantbomb.com/join

polygon and giant bomb dead in the same week is just unfathomable

Cat

Because they clearly don’t have a vision. They’re ruining their flagship product to chase after something consumers by and large don’t want.

Techmeme@techmeme.com · last yr.

A look at Google's efforts to improve Search with AI; sources: its leaders have struggled to articulate a vision for how they want Search features to evolve (Erin Woo/The Information) Main Link | Techmeme Permalink

Here's a playlist with the 7 KubeCon talks from TAG Security leads! Seven!! 🤯 @mikeneeds.rest @sublimi.no www.youtube.com/playlist?lis...

TAG Security @ KubeCon EU 2025 - YouTube

youtube.com

This is it, @mikeneeds.rest. The high water mark. The peak. The climax. The apex. It only goes down from here.

🚨 OpenSSF community is heading to Denver for #OpenSSFCommunity Day NA 2025 on June 26! AI security, SBOM tooling, real-world TTX, and more — all in one day. 🌄 Co-located with #OSSummit 🛡️ Agenda is live — register now! 🔗 openssf.org/blog/2025/04... #CyberSecurity #OpenSourceSecurity

Love when companies post about being major contributors to #opensource projects after laying off a ton of core contributors to those projects!

A keynote about the EU Cyber Resilience Act at the #KubeCon #CloudNativeCon EU couldn't be more appropriate! Happy to see it there and that we start collectively discussing the implications, how to comply, etc.! Thanks @eddieknight.dev and @michaellieberman.bsky.social for bringing that topic 🙂

Are you confused about the CRA? Check out @mikeneeds.rest and @eddieknight.dev's #KubeCon keynote on Friday morning.

The Linux Foundation@linuxfoundation.org · last yr.

Confusion remains around the Cyber Resilience Act (CRA)! 17% of non-commercial OSS developers wrongly assume it applies to them, while 59% are unsure. Learn if it applies to you in our full report: www.linuxfoundation.org/research/cra... #OpenSource #CRA

AOC: I want to live in an America that guarantees healthcare to every person. I want to live in an America that has a living wage for every person I want to live in an America where you have free speech to express yourself and not be afraid of being put on a list or deported.

I'm looking for my next thing, and I need to move fast. I have several years of experience in developer relations from startups to the enterprise, and I'm particularly skilled at distilling complex topics into something easily understood by newbies and non-technical folks alike, on stage or off. 1/3

If you're wondering where we stand on politics coverage, we're not slowing down, or stopping anytime soon. Some words from our Global Editorial Director @katie-drummond.bsky.social:

Katie Drummond@katie-drummond.bsky.social · 2y ago

I had the privilege of talking to @apnews.com about WIRED's Elon Musk and politics coverage. Most important thing: We're not slowing down, we're not stopping, and we're going to cover this story, relentlessly, for as long as we need to. apnews.com/article/elon...

After testing OpenAI and Gemini models on the 3 puzzle problems proposed in January on my blog, it is time to look at how Claude models answer them. Tested only versions 3 and 3.5 since I ran the scripts back in Jan, but even so the models performed quite well. More on my blog: mihai.page/ai-2025-5

How do Claude models perform on the 2025 AI puzzle competition?

In this article I read 2.5 million characters output by Claude models to score them on the 3 problems I proposed in the previous articles.

mihai.page