Remote

Andrew Lilley Brinker

@alilleybrinker@hachyderm.io

mastodon 4.6.6

🦀 #rustlang / 🐦 #jj / 🍄 #atproto / 📦 #opensource
⚠️ CVE / ✅ Hipcheck / 🔎 OmniBOR
🔵 Principal Engineer at MITRE (opinions are mine)

Mostly posts on BlueSky.

0 Followers

0 Following

19 Posts

Joined February 11, 2023

BlueSky Bridge:

https://hachyderm.io/@alilleybrinker.com@bsky.brid.gy

Personal Website:

https://www.alilleybrinker.com

Pronouns:

he/him

keytrace:

did:plc:geozyv62fx63m7jhr4eraubc

Posts

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · May 08, 2026

Hipcheck 3.15.0 is out!

Includes prebuilt binaries for Arm64 Linux, improved affiliation analysis, better errors for bad policy files, better detection of SPDX SBOMs, and improved query registration in the Rust SDK!

https://hipcheck.mitre.org/blog/hipcheck-3-15-0-release/

hipcheck.mitre.org

Hipcheck 3.15.0 Release

Helping maintainers assess software packages for long-term risk.

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Mar 19, 2026

RE: @infoq@techhub.social

“Andy Brinkmeyer”?

Our names are too similar and we both like Rust. We must be destined to do battle

techhub.social

InfoQ: "While #RustLang’s Memory Safety is a strong found…" - TechHub

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Nov 21, 2025

RE: @yossarian@infosec.exchange

Seems obviously right. At the very least, this will test vendors' claims that they can quickly detect bad packages pre-installation; if that's true, then a widespread cooldown policy wouldn't cause windows of opportunity to widen.

infosec.exchange

yossarian: "We should all be using dependency cooldowns http…" - Infosec Exchange

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Nov 10, 2025

New from me in the ACM Queue: "Memory Safety for Skeptics," where I argue in favor of pursuing memory safety amid competing priorities, and how to do it!

https://queue.acm.org/detail.cfm?id=3773095

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Feb 12, 2025

We usually think of open source as being volunteer-based, but corporations are pervasively involved in open source software.

Their impact is enormous and under-recognized.

In this post I dive deep on the history, market forces, ecosystem effects, and options for action to make open source more resilient to corporate capture and expand options for support.

https://www.alilleybrinker.com/blog/open-source-software-and-corporate-influence/

#opensource

Andrew Lilley Brinker

Open Source Software and Corporate Influence — Andrew Lilley Brinker

Exploring how corporations gain power in open source projects, and how to build resilience to corporate capture.

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Dec 14, 2024

Checkout out Mastodon and once again being annoyed at the lack of quote posts, even just to quote yourself

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Oct 23, 2024

@phooky@octodon.social There is an unstable feature for inferring the length. https://github.com/rust-lang/rust/issues/85077

GitHub

Tracking Issue for `_` as a const argument: `feature(generic_arg_infer)` · Issue #85077 · rust-lang

This is a tracking issue for the RFC GenericArg::Infer The feature gate for the issue is #![feature(generic_arg_infer)]. What is GenericArg::Infer? Currently, rustc supports type inference. That is...

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Dec 16, 2023

Replying to @alilleybrinker@hachyderm.io

UPDATE: https://hachyderm.io/@alilleybrinker/111591518571322904 #rust #rustlang

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Dec 13, 2023

Replying to @cliffle@hachyderm.io

@cliffle@hachyderm.io @mo8it@fosstodon.org glad you liked it! 😄

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Dec 09, 2023

Replying to @thephd@pony.social

@thephd@pony.social C++ Directions Group losing their minds

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Dec 09, 2023

Replying to @mo8it@fosstodon.org

@mo8it@fosstodon.org Bjarne about to start ending every essay with “Rust delenda est” (https://en.m.wikipedia.org/wiki/Carthago_delenda_est)

Andrew Lilley Brinker @alilleybrinker@hachyderm.io · Dec 09, 2023

Replying to @corpsmoderne@mamot.fr

@corpsmoderne@mamot.fr @mo8it@fosstodon.org Some sample links of how hard it is to hold C correctly: https://pinboard.in/u:alilleybrinker/t:c/