Justin Womersley 🛡

📢 Thread 1/ Big news: PyUp is now Safety Cybersecurity! 🎉🚀 It's much more than a new name; Expansion beyond Python into Java, .NET, and JavaScript, AND two big products Full details: safetycli.com/research/safet… #SafetyCybersecurity #DevSecOps #SoftwareSupplyChain

@safetycli 4/ 🤝 Let's Connect! I'm eager to hear your thoughts and your software supply chain security challenges. To learn more about Safety, visit safetycli.com #vulnerabilitymanagement

@safetycli 3/ 🌍 Expansion beyond Python: Safety is expanding to Java, Javascript, and .NET! To get industry-leading dependency security in these ecosystems, let me know and I can get you early access #BeyondPython #CyberSecurity

📢 Thread 1/ Big news: PyUp is now Safety Cybersecurity! 🎉🚀 It's much more than a new name; Expansion beyond Python into Java, .NET, and JavaScript, AND two big products Full details: safetycli.com/research/safet… #SafetyCybersecurity #DevSecOps #SoftwareSupplyChain

@sethmlarson Yup, makes sense. Very cool!

@sethmlarson Cool! So just to confirm, this type of SBOM would be able to be generated IF PEP710 is implemented, and so access to package provenance information available?

I’m giving a talk on Python Dependency Security 🐍 at @indypy, including all the things I’ve learned from running pyup.io for the last 4 years. Join me on Feb 8th at 7pm ET here: meetingplace.io/indypy/events/… - see you there!

Next week I'm giving a talk on Python Dependency Security, including all the things I've learned from running pyup.io for the last 4 years. Join us on Feb 8th at 7pm ET here: meetingplace.io/indypy/events/… - see you there!

@shehackspurple What a great thread, thank you!

You still need to get to get the message across, and often the message is not good news. That said, don’t let people yell at you at work. We all deserve to work in safe places, and for most people being yelled at doesn’t make us feel safe. Just a random memory and thought.

Thread 🧵about yelling In my early twenties I had a boss that yelled and screamed at people. I was new, but had heard it happen to others. One day I reported a design flaw to him, for a new app we were about to build. He started to get upset, like he was going to yell.

Any NPM package released before Sept 2020 could have been updated maliciously by an attacker without authorization. Ouch! - #security-issues-related-to-the-npm-registry" target="_blank" rel="nofollow noopener">github.blog/2021-11-15-git…

this is why we make so many jokes about brands doing the rainbow shit in june btw

The shocking reveal to my myopic character here is - EVERYONE needs help sometimes. Reach out to your friends 💜#WorldMentalHealthDay

Log(😅) = 💧Log(😄)

@shehackspurple Oh that’s an interesting question!

Is there a list somewhere that correlates CVEs to specific data breaches they have caused? Or vise versa? I've looked at the Verizon Breach Report, and a few other places, can't seem to find that anywhere. #AskInfoSec

Normally I stay out of council business but after working with community for well over a decade to do the heavy lifting that put Vancouver in a globally significant leadership position on climate action, i have to say something about the vote yesterday. TL;DR it was a huge loss

Who is leading the way in interesting real world/hybrid physical/digital NFT structures? Cc @simondlr @IslandsXYZ

Vancouver's Climate Emergency Parking Program failed to pass at council tonight It would have paid for up to 31% of the city's climate plan and significantly reduced vehicle emissions @kennedystewart sided with the five conservative leaning councillors to vote against it

@notshenetworks This sucks. I am sorry this happens, it shouldn’t. You should be able to do your job and foster your career without having to deal with / worry about this type of unwanted and unprofessional harassment. Tech community please do better!

Reminder that women don’t work in tech just for your viewing pleasure. It’s creepy. It’s not a compliment. It’s unwanted. Stop.