Makers of open source and free-to-use tools for AI-curious developers. Find our most recent project here: https://xitter.twitterapi.xyz/t.co/OpQTkZ1cge
Remote and asynchronous
Joined April 2023
- Tweets404
- Following74
- Followers547
- Likes288
"AI's effects on programming jobs; doom and utopia are not our only options." hubs.la/Q03dmSPW0
1
474
MCP: The Ultimate API Consumer (Not the API Killer) hubs.la/Q03dmRkg0
1
2
317
Three types of AI missteps during agentic coding and how to safeguard against them; thoughts from @birgitta410. hubs.la/Q03dmPyR0
1
225
Emergent misalignment is strongest in GPT-4o and Qwen2.5-Coder-32B-Instruct, but all fine-tuned models exhibit inconsistent behavior hubs.la/Q03cz4zK0
The model is the product; were investors wrong to bet on the application layer? hubs.la/Q03cZX5V0
2
176
"This technique enables hackers to silently compromise AI-generated code by injecting hidden malicious instructions into seemingly innocent config files used by Cursor and Copilot" 😟hubs.la/Q03cZTDF0
New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents
pillar.security 1
198
15 AI Agent Papers You Should Read From February. Or, at least get the TL;DR from your favorite model hubs.la/Q03cz6jh0
Not easy, but effective. Hallucinations were almost entirely resolved using CURE + reverse RAG + more LLM magic hubs.la/Q03cz5nt0
140
Working malware is easily generated from DeepSeek's R1 model with a gentle nudge and a few human edits hubs.la/Q03cyMJy0
132
Join Stacker @jaosorior for an Intro to #Minder today at 10am ET / 3pm BST / 5pm EEST to get a high-level overview and demo of the project.
YouTube livestream is at: youtube.com/watch?v=YvP9YGQ4…
#SupplyChainSecurity #ShiftLeft #DevSecOps
Now available in #Minder: Profile Selectors give you the flexibility to customize how & when policies are applied to your projects. Easily customize how Minder profiles are applied to your projects, and apply the right rules to the right resources.
stacklok.com/blog/flexible-p…
📣TODAY! Join @puerco at #SOSSCommunity Day Europe as he dives into how to build a trusted end-to-end VEX stream, from code to scanner diving deep into a VEX document and explores other highlights of the OpenVEX ecosystem.
Thu. Sep 19 at 10:40am CEST
sched.co/1gb7z
1
146
In London? Our CTO @decodebytes will be keynoting @DevSecOpsLG tonight with a talk on "Secure Repo Management as Scale, with Minder" at Google's (Central Saint Giles) London Office.
Sign up here👇
meetup.com/devsecops-london-…
Livestream begins in 2 short hours, grab your 🌮 tacos and meet us there!
Securi-Taco Tuesdays presents "Understanding Software Trust: Let’s explore Secure Attestations & the in-toto framework" with special guest @torresariasss
youtube.com/watch?v=nS3DCjcr…
1
86
If your'e at Open Source Summit Europe this week, be sure to check out our own @radoslav_dimitr and @GitHub's @sparcv9 for their talk:
Enhancing Artifact Security with GitHub’s Build Provenance and Minder
🗓️ Wed. Sep. 18 at 11:00 CEST
sched.co/1ej5Z
#OSSUMMIT #OSSEU
1
111
🔔TOMORROW: Join us for Securi-Taco Tuesday's livestream on Secure Attestations & the in-toto framework with @torresariass @puerco and @stacey_potter
Join @puerco & @stacey_potter for another #SecuriTacoTuesday livestream on Sep. 17! Bring your tacos as we dive into #SecureAttestations and the in-toto framework!
youtube.com/watch?v=nS3DCjcr…
DPRK-aligned threat actors have launched a new surge of activity targeting developers in the cryptocurrency and Web3 sectors using malicious NPM packages. Our investigation revealed the stealer and loader BeaverTail embedded in these packages: stacklok.com/blog/dependency… #malware
In 1 week: 🔒Securi-Taco Tuesdays 🌮 hosts @puerco & @stacey_potter invite @torresariass to for: "Understanding Software Trust: Let's Explore Secure Attestations & the in-toto Framework"
🗓️ Sep 17th (11am PT | 12pm CST | 2pm ET | 7pm BST) Sign up here:
meetup.com/stacklok-user-gro…
🚨SigstoreCon CFP closes THIS FRIDAY (Sep. 13)! 🚨
Share your sigstore, SLSA, and/or TUF adoption story, learnings from building a sigstore client, a technical deep dive, research, or supply chain best practices!
📣 Last call for CFP submissions for #SigstoreCon Supply Chain Day! Share your insights on Sigstore, SLSA, TUF, or best practices in supply chain security. 💬
📅 Deadline: Sept 13, this Friday!
Submit here: sessionize.com/sigstorecon-s…
Share your story & join the conversation!
