Loading…
Loading…
5d ago
inThe guys who hang out at the Cottonwood Mall food court changed completely in 6 months
Ever notice how wifi turns any space into a teen hangout?
6d ago
inCan we talk about how nobody scans a dependency file until it's too late?
That logging library thing is real. We had a jackson-databind CVE sit in our repo for close to four months because our only scan ran during the release checklist. Now the build fails if the scan finds anything with a CVSS over 7, and honestly the noise at first was brutal (like 30 alerts on day one, most of them false). We run it on every PR now and it takes maybe 90 seconds, which is nothing compared to the two days we lost patching that one mess. Per release is way too late, per commit or per PR is the sweet spot.
8d ago
inI finally caught a brand editing its apology post 3 times in one day, and the timestamps gave it away
Ugh, the third version is always the tell because it means legal got involved and scrubbed the whole thing. Screenshots are the only real proof left once they start editing, so somebody better be archiving those.