Paul Novarese
@pvn.li
Minesweeper aficionado. Infosec/Software Supply Chain Security/OPSEC/SBOMs. Mycology dilettante, coffee enthusiast, manhole cover connoisseur. Memphis, TN, USA. Fediverse: @pvn@mas.to
This is just one example. Tons of software is running in sensitive production environments without anyone knowing anything about the people writing and controlling the software. We're starting to look and we're finding a lot of weirdos.
The open source software easyjson is used by the US government and American companies. But its ties to Russia’s VK, whose CEO has been sanctioned, have researchers sounding the alarm. www.wired.com/story/easyjs...
Security Researchers Warn a Widely Used Open Source Tool Poses a 'Persistent' Risk to the US
The open source software easyjson is used by the US government and American companies. But its ties to Russia’s VK, whose CEO has been sanctioned, have researchers sounding the alarm.
www.wired.com
May 5, 2025 at 12:07 PM
This is just one example. Tons of software is running in sensitive production environments without anyone knowing anything about the people writing and controlling the software. We're starting to look and we're finding a lot of weirdos.
The only good thing about this phenomenon is that it's a great way to very quickly find out if you're talking to a drooling idiot.
chatgpt has fully broken-through to every facet of the corporate environment. I'm spending a not-insignificant amount of my time every week now explaining to people that just because chatgpt told you that something was possible doesn't mean that it a) is or b) even exists
March 22, 2025 at 12:56 PM
The only good thing about this phenomenon is that it's a great way to very quickly find out if you're talking to a drooling idiot.
@kenjennings.bsky.social please settle a dispute about this clue from Wednesday's match, would you have accepted "Duke of Windsor" here? At the time in question, he wasn't yet Duke of Windsor, in the general case does the name of a person at the time specified in the clue matter? TIA
February 28, 2025 at 1:56 PM
@kenjennings.bsky.social please settle a dispute about this clue from Wednesday's match, would you have accepted "Duke of Windsor" here? At the time in question, he wasn't yet Duke of Windsor, in the general case does the name of a person at the time specified in the clue matter? TIA
did the dns verification thing so now I'm @pvn.li instead of @pvn.bsky.social
bsky.social/about/blog/4...
bsky.social/about/blog/4...
How to verify your Bluesky account - Bluesky
Here's how to verify your Bluesky account by setting your website as your username.
bsky.social
December 3, 2024 at 1:47 PM
did the dns verification thing so now I'm @pvn.li instead of @pvn.bsky.social
bsky.social/about/blog/4...
bsky.social/about/blog/4...
@reckless.bsky.social when a decoder guest brags about how data-driven their decision making is right after he just told you he went 100% with gut feeling when deciding to implement return to office, you should call them on it.
October 14, 2024 at 8:28 PM
@reckless.bsky.social when a decoder guest brags about how data-driven their decision making is right after he just told you he went 100% with gut feeling when deciding to implement return to office, you should call them on it.