terminally online engineer 🇺🇦

terminally online engineer 🇺🇦

187个推特粉丝

关注

technology brother | building the future until the next world disaster tech blog: http://bognov.tech nonsense: http://bogdannovykov.substack.com http://social.linux.pizza/@tekbog

动态

terminally online engineer 🇺🇦

网络安全团队：“这里有关于如何处理新软件包和审计的所有指南” 运维团队：“你需要在流水线中运行这些网络安全工具，并在部署二进制文件之前运行此命令” 后端团队：“锁定并检查你的依赖项” 使用 npm 进行恶意 Web 开发：

terminally online engineer 🇺🇦

软件工程领域最大的秘密就是没人会进行审计，无论公司规模大小，情况都一样。你可以制定流程、规则和持续集成工具来捕获特定问题，进行包分析、二进制分析，甚至把网络安全人员纳入员工编制——但总会有人直接用 `npm i virus` 命令来检测病毒。

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios

terminally online engineer 🇺🇦

每个人都在组装电脑

Computer use is now in Claude Code. Claude can open your apps, click through your UI, and test what it built, right from the CLI. Now in research preview on Pro and Max plans.

terminally online engineer 🇺🇦

GitHub Copilot 广告？ twitter.com/tekbog/status/2038...

terminally online engineer 🇺🇦

“很多人问我一些问题，而我的T恤上写着‘我不是反基督者’，这些问题的答案就在这里。” twitter.com/tekbog/status/2033...

terminally online engineer 🇺🇦

你们真的该停止对风险投资人撒谎了，哈哈

terminally online engineer 🇺🇦

老婆从来没看过《星际大战》放了第一部她问了一大堆问题然后睡著了

terminally online engineer 🇺🇦

太疯狂了，中国汽车要彻底蚕食德国在欧洲的汽车市场了 gg twitter.com/tekbog/status/2031...

Loading..