Already looking forward to receiving all the spam calls.

GenDigital is the new name of Symantec?

I never know whether they are the creators of or the protectors against malware.

What are your thoughts? IMO the concept of protecting executions of an AI agent sounds like a good idea, right?

I trust most foreign governments more than the US government though…

Still too many in favour

But how are they going to include useless “uninstallable” apps and advertisements?

deleted by creator

This article talks about “typosquating”, that just means they introduced packages with a similar name to other packages but in this case also containing malicious code.

I expect other package managers to be just as vulnerable to this. The only way I can think of to mitigate this is very strict registry policies, someone checking all version of all packages in the registry to make sure there is no malicious code in them. That would take a lot of effort.

I think the biggest problem with npm is just that it is very popular, so for attackers the chance of hitting something with their attack is bigger than with other systems.

I don’t believe yarn is any more secure than npm, especially not for this type of attack. Yarn used to be a bit more secure because it checked checksums where npm didn’t, but that has been added to npm as well now (https://sebhastian.com/npm-err-code-eintegrity/)

Cambridge Analytica accusing Brave? Who is the bad guy in this story? I am confused.

May all Musk’s businesses have the same results. Amen.

Just curiousity: why not Matrix?

Land of the free

The best way to watch sports is to go to the arena, the second best way is to go to the pub/bar/sports cafe and watch with the neighbours. Like the old days.

1945: the US defeats the Nazis 80 years later: just kidding, the US became the Nazis.

What are you doing about it? We all know how it’s going to turn out.

deleted by creator