February 4, 2022
by sjvn01
Comments Off on The Alpha and Omega of software supply chain security
What is the Alpha-Omega Project? Its purpose is to “improve global open source software supply chain security by working with project maintainers to systematically look for new, as-yet-undiscovered vulnerabilities in open-source code” and then fix them. This is vital to improving … Continue reading
February 3, 2022
by sjvn01
Comments Off on Is npm a Hotbed of Malware?
According to WhiteSource, a leading open source security provider, npm, one of the most widely used JavaScript package managers, is a playground for malicious actors. Is it really that bad? First, JavaScript is wildly popular. Love it or hate it, Javascript by Stack Overflow’s … Continue reading
February 1, 2022
by sjvn01
Comments Off on Securing the open source ecosystem: SBOMs are no longer optional
In the last year and a half, one cybersecurity mess after another — the SolarWinds software supply chain attack, the log4j vulnerability, the npm bad code injection — have made it clear that we must clean up our software supply chain. That’s … Continue reading
January 31, 2022
by sjvn01
Comments Off on No, Linus Torvalds is not Bitcoin’s legendary creator Satoshi Nakamoto
One of the great tech mysteries is “Who really is Bitcoin’s inventor, the mysterious Satoshi Nakamoto?” Recently, some people thought Linus Torvalds, the developer behind both the world’s most popular operating system, Linux, and its most popular development tool, the Git distributed version … Continue reading
January 28, 2022
by sjvn01
Comments Off on JFrog Helps Clean up Bad npm JavaScript with 3 New Tools
When Microsoft acquired JavaScript Node package manager (npm) company npm, with its over 1.3 million packages and 75 billion downloads, I’d hoped that some of npm’s notoriously unstable releases would finally be fixed. I hoped in vain. For instance, the recent npm … Continue reading
January 28, 2022
by sjvn01
Comments Off on SUSE unveils Rancher Desktop 1.0 for Kubernetes on your PC
As Kubernetes users know, Rancher is a popular complete software stack for running and managing multiple Kubernetes clusters across any infrastructure. Now, since Linux and cloud-power SUSE acquired Rancher, it’s launched its first new program: Rancher Desktop 1.0 Rancher Desktop is an open source program that … Continue reading