🚨 Emergency DevSec Station Drop
There's an active npm supply chain attack happening right now. Compromised packages are stealing SSH keys, AWS credentials, GitHub tokens, browser passwords, and crypto wallets on install. Then using your publish token to infect every package you maintain.
One command can protect you immediately: npm config set ignore-scripts true
1/2
Fun #JavaScript bug with "default parameters".
`null` values are considered "defined" so they won't be replaced with defaults unlike values set to `undefined`.
```
function example({something='default'}) { return something }
example({}) === 'default'
example({something: undefined}) === 'default'
example({something: null}) === null
```
I developed an AI model that is so dangerous to the plumbing industry that I am not going to be able to release it to the public.
Manitoba’s NDP banned surveillance pricing.
Saskatchewan’s NDP is pushing to do the same.
Canada’s NDP proposed it, blocked by Liberals.
Ontario’s NDP proposed it, blocked by Conservatives.
The NDP is fighting to make life more affordable. The othe… https://twitter.com/OntarioNDP/status/2046597337670099409
Kinda wish the #JavaScript API for custom elements that extend `Button` allowed using the custom tags. Setting `<button is="some-element">` is kind of annoying since I can't use `some-element {}` as a CSS style selector anymore.
DDos (Distributed Denial of Service) attack against BlueSky a few days ago: The whole network goes down.
DDoS against mastodon.social today: Lots of users on that instance impacted, the rest of the Fediverse keeps on running, my instance doesn't really notice, messages will be queued up until mastodon.social is reachable again.
Both networks claim to be decentralised and federated. You decide :)
Occult Enby that's making local-first software with peer to peer protocols, mesh networks, and the web.
Yap with me and send me cool links relating to my interests. 👍