Andrew Storms @St0rmz at most places

Here’s what you need to know about #AI agents’ impact on #softwaresupplychainsecurity — and what you can do to fight back. 👇 hubs.ly/Q044qc2-0 Hat tip to @st0rmz

@Badgerops @eastdakota @Cloudflare 100%. I complain every year. Nothing changes. Most painful renewal of all my suppliers.

Hey @eastdakota longtime @cloudflare user here. I love what y’all do, as an engineer it is fantastic. As an enterprise customer I am ticked off. In renewal talks now, and the contract quote is complicated, service definitions opaque, and nobody can explain the breakdown clearly

Super cool concept and product from @replicatedhq! What if open source maintainers had a sustainable income source based on secure builds? securebuild.com/blog/introduci…

Today we're proud to launch SecureBuild: Zero CVE Images, Built for Open Source by Partnering with Open Source securebuild.com

@tomashertus @marccampbell Ya, like SARIF or STIX feed/report. Go search SecureBuild for matches.

@marccampbell That's step to the right direction. Auditors mandate 30 day to fix a Critical vuln, so the SLA is the key to meet these deadlines. Would be great to have local CLI which parses list of Qualys findings, and get me list of images that SecureBuild has to resolve my findings🤔

We are launching securebuild.com today - partnering with open source companies/projects to generate secure builds (cve-free) versions of their images, and making sure the projects get the bulk of the revenue from every subscription. youtu.be/TVn3WKOmxnM?si…

So. Ya. New tweet deck is pretty horrible.

Every so often I tell ChatGPT something random. Today's response, "I understand that you mentioned your grandmother's smelly feet,"

This is why Chainguard images reigns supreme 🤗 go.chainguard.dev/ReplicatedCase…

Join us on June 15th for RepliCon and more importantly for my session with @lorenc_dan Talking about supply chain security. #CyberSecurity app.livestorm.co/replicated/rep… @replicatedhq

Using ChatGPT to aid in your supply chain attacks via LLM hallucinations. vulcan.io/blog/ai-halluc…

To address software adoption challenges with enterprise customers, try using #Security as an enabler. replicated.com/blog/security-…

"Academics have apparently trained a machine learning algorithm to detect scientific papers generated by ChatGPT and claim the software has over 99 percent accuracy." theregister.com/2023/06/08/sci…

Oh, and now there's a volcano erupting? What a week! BBC News - Watch Hawaii's Kilauea volcano erupting in fiery display bbc.co.uk/news/world-us-…

Every time I hear an Amazon EV truck go by, I think of the movie Sleeper from ~1973

I'm a day late to the party, but the latest #DBIR is now out. verizon.com/business/resou…

Using Security as a Catalyst to Improve Application Adoption Metrics. "version adoption is one of the most valuable indicators of the quality, reliability, and ease of use of a distributed software package" replicated.com/blog/security-…

Huh? "And SLSA only works with Google Cloud Platform while the Red Hat software is platform-agnostic." That's not even close to correct.