Chainguard's new scanner blocks "greyware" — open source packages that pass every security check but still steal credentials, harvest API keys, and phone home to remote servers.

Anyone who builds software with client side validation should go read about phreaking

By maintaining focus on your existing goals and proven metrics, you can ensure that AI becomes a genuine accelerator of your mission rather than an expensive distraction. By @stevefenton.co.uk

LOL they won't listen to me, maybe they'll listen to @mattmoor.dev

Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them. By @mattmoor.dev, thanks to Chainguard

PSA: attacks on public infrastructure like software package registries are on the rise. Here’s an active one targeting folks who have crates.io accounts.

Six months after launching container host VMs, Chainguard is expanding into application and base VM images with zero-CVE guarantees. By @darrylktaft.bsky.social

Vibe coders must understand that AI is just a productivity tool, and they — not the AI — are ultimately accountable for the code it produces for them. By @mattmoor.dev, thanks to Chainguard

There’s a difference between genAI not being good and not being able to get good results when using genAI.

For CI reasons (speed), I wrote a FUSE filesystem to act like the $GOMODCACHE directory to make it look like all world's #golang modules are available locally on disk without having to download them. Then the FS downloads them if/as needed, storing them in git trees/blobs (no commits) for de-dup.

Sounds like ko for swift 😁

Cool to see AWS notifying customers of misconfigured OIDC trusts which are vulnerable!

Report: 83% Of Americans Just Want To Put On Sunglasses And Say ‘Let’s Do This’ theonion.com/report-...

It costs nothing yet the feeling it generates is priceless when you let people know you appreciate the work they’re putting in.

"Matt Damon famous?" "Well, maybe Ben Affleck famous..."

Find someone that looks at you the way Biden looks awarding Magic Johnson the medal of freedom.

Parents Mortified as Kids Turn Elf on the Shelf Into Snitch in the Ditch: bit.ly/4gnERdA

Optimist: head Pessimist: tail Realist: grep

How do you weigh an elephant? The same way you weight a human, just on a much larger scale.

King Charlie begging for 🦃

PSA: don’t forget to take the giblets out of the neck area.

Google Cloud's most annoying feature is probably that so much relies on GCP load balancers. You need them to do an static https site backed by a bucket, you need them to use IAP with Cloud Run, etc. etc. So many low cost services instantly jump to $30/m because they need an LB.

Someone told me it's the same pattern as cp and mv and I'll never forget command <thing that exists> <thing you want to create>

This is cool. I guess I'm now @mattmoor.dev