sboms are all the rage now, and I’ve been thinking of them like the ingredients on packaged food. Similar to how some foods have “no MSG” or “sugar free”, I wonder how long it will be before we see software with “No Apache Struts” or “Written with only memory-safe languages”…
Conversation
Notices
-
Embed this notice
Merry Jerry 🎄🎅🕎⛄️❄️ (jerry@infosec.exchange)'s status on Friday, 22-Dec-2023 03:04:54 JST Merry Jerry 🎄🎅🕎⛄️❄️ - clacke likes this.
-
Embed this notice
jaKa Močnik (jkmcnk@mastodon.social)'s status on Friday, 22-Dec-2023 03:04:58 JST jaKa Močnik @jerry the "intel inside" lookalike sticker, just saying "AI outside."
clacke likes this. -
Embed this notice
Xavier «X» Santolaria :verified_paw: :donor: (0x58@infosec.exchange)'s status on Friday, 22-Dec-2023 03:05:01 JST Xavier «X» Santolaria :verified_paw: :donor: @jerry Or "We got exception to bypass the XXX process to ship you this marvellous software"
clacke likes this. -
Embed this notice
Security Writer :verified: :donor: (securitywriter@infosec.exchange)'s status on Friday, 22-Dec-2023 03:05:05 JST Security Writer :verified: :donor: @jerry I read this on my watch as “Shrooms are all the rage now” and thought we’d discovered what the Christmas Jerry was all about, and I can’t say I’d disapprove.
Also I’ve started requiring labels like this on our CMDB for certain use cases.
‘No Java’, ‘No Electron’, ‘Dot Net Core ver’
clacke likes this. -
Embed this notice
Pär Björklund (paxxi@hachyderm.io)'s status on Thursday, 28-Dec-2023 16:33:45 JST Pär Björklund @jerry following the food labeling we'll see apache httpd 100% log4j free
clacke likes this.