Vulnerability advisories entering the public record over 5 years: PHP 6.6x, Java 4.8x, .NET 4.2x, Rust 3.0x, Python 2.3x. The count of catalogued open-source scanning tools per language stayed flat. For Rust that is up to 157 new advisories per open-source tool per year.
#infosec #opensource #sca
#sca
21 posts · Last used Sep 02
Here's an interesting one around all the "no projects with the LLM taint wanted here" discussion, taking Codeberg as example:
Codeberg offers to host binary releases
Current (FOSS) software contains hundreds or thousands of individual works as dependencies in deep dependency trees
It can be regarded as nearly certain that a substantial amount of those projects will fall under the exclusion or problematic class as per the rules above
Once complied to a release binary those "tainted" works are often included in the binary and will thus be uploaded to the forge as a release.
Hence, the forge will be hosting ToS violating material on behalf of the project subjecting the otherwise possibly compliant project to possible sanctions.
Now what do we make of that thought experiment? And how do we resolve it?
#codeberg #llm #sca #foss #compliance #fossdrama #opensource #fossdrama #drama #aiassistedcoding
Regeringen ger klartecken för att bygga ytterligare 85 vindkraftverk i Markbygden i Piteå. Det nya tillståndet gäller moderna turbiner som ska verka på hög höjd.#Nyheter #Jobb #Redaktionell #Markbygden #Vindkraft #Energi,naturtillgångar&elproduktion #Näringsliv #Ekonomi,näringsliv&finans #Piteå #Piteåkommun #Norrbottenslän #Norrland #Sverige #SCA #Affärsvärlden #VindkrafteniMarkbygden #Uppdatera
Grönt ljus för ny etapp i Markbygden: ”Mer effektiv vindkraft”
“Memory-maker Micron has found a way to keep #prices for its products sky-high for another five years, by signing 16 “strategic customer agreements” #SCA s that include a #FloorPrice the company says comes with “a very robust #GrossMargin for #Micron, well above our peak quarterly margins in any past cycle.”
#DRAM / #NAND / #economics
You've seen all posts