Dale Bustad

🚨 Open source supply chain attacks are exploding.

Starting today, that ends.

We’re releasing Socket Firewall — FREE, zero-config, CLI that blocks malware before it lands on your laptop or CI.

Just run:

npm i -g sfw
sfw npm install lodash

Works for: npm, yarn, pnpm, pip, uv, and cargo.

The free version blocks malware only. We're also rolling out an enterprise version that, among other things, will allow configurable blocking policies.

Maintainer compromises used to be rare. Now they’re happening at an alarming rate, as seen in recent attacks. Today we’re giving developers a new layer of defense with Socket Firewall, a free tool that blocks malicious dependencies at install time.

Trump Quietly Plans To Liquidate Public Lands To Finance His Sovereign Wealth Fund President Donald Trump’s executive order to create a sovereign wealth fund requires that the United States come up with heaps of cash quickly, which may make selling out and selling off public lands i...

The actions that Trump has taken against marginalized people are inarguably worse but, for some reason, the thought that they’re pursuing the liquidation public lands (read as "sell off national parks to be privately developed") really hurts my heart.

Thanks @mapquest.com!

Ok here’s a thread of feeds that aren’t topic themed but utilitarian and do things like show you different versions of your timeline or provide services that should be official Bluesky features. 🧵

Our current energy system is extremely wasteful.

More than 2/3 of primary energy inputs end up as waste heat.

Yet the customer has to pay for all of the energy in the left hand side of this chart to get the small amount of energy converted to energy services.