My name is Marek Counts. Lets learn something new and have fun while doing it.

Joined June 2020
TheNullChannel retweeted
I'm not saying this is a supply chain attack, but I will say that the behavior is indistinguishable from what someone trying to perform a supply chain attack in the future would do.
Possible supply chain attack happening in the web ecosystem right now all under the guise of supporting node 0.4. Does this GitHub action allow ljharb to inject back doors? Replacing setup-node is very suspicious behavior.
2
13
145
14,477
TheNullChannel retweeted
I don't have any philosophical or ethical issues with source-available licenses, but their proponents are going to have to address these cease-and-desist threats if they seriously expect them to fix imbalances in OSS sustainability. Developers working in OSS (OSI/FSF approved licenses) are going to be prevented from engaging with or even looking at source-available projects completely to prevent the risk of lawsuits. It's just too risky to pretend otherwise. There's no gradual transition here, it's going to be a hard fork in communities if these lawsuit threats keep continuing. And I know which community I'd bet on sticking around. This isn't "just another license", it's a dramatic shift in norms that's going to result in lawyers coming back. And no one wants that.
1
6
4
33
5,344
TheNullChannel retweeted
Hey! If you'd like to get involved in the open letter we're writing in support of NIST and the NVD in the face of this slowdown in reporting, please join the google group here: groups.google.com/g/nist-nvd… And request access in the document here: docs.google.com/document/d/1…
7
1
23
2,168
TheNullChannel retweeted
#Klustered is launching on @OReillyMedia in April and I'm a little bit excited Reserve your space now! 😁 oreilly.com/live-events/klus…
3
2
28
1,760
Huge news on the horizon for #Klustered! Ready for an epic comeback? Awesome, because we're giving away 20 Klustered t-shirts! Simply share this post and we'll slide into your DMs to confirm your entry.
6
3
12
2,346
TheNullChannel retweeted
Who's ruining open source more - VCs or foundations? Find out today on our stream with @cra and @reneeshah123! linkedin.com/events/71512767…
4
3
2
20
8,034
Curious about a truly open source alternative to GitHub? In 15 minutes, we'll be taking a look at what's new with @giteaio and Gitea Actions with @techknowlogick Come say hello youtube.com/watch?v=_2SBUOo6…
1
5
3
1,019
TheNullChannel retweeted
In some sort of strange punishment, tomorrow I'll be recording myself trying to upgrade otel to patch CVEs in a few apps. Candidates are @kyverno, keda, @CertManager, @argoproj or @temporalio. I have an hour so we'll get through as many as I can, or zero.
1
4
1
24
3,135
🖼️ Our image tagging philosophy as explained by @ImJasonH ⤵️ chainguard.dev/unchained/cha…
6
10
1,340
TheNullChannel retweeted
If you run @projectcalico - we have a full set of @chainguard_dev images! 0 CVEs vs. hundreds, including criticals in the upstream images! We have the node images, csi , controllers, images, typha - everything to deploy the helm charts with 0 CVEs. edu.chainguard.dev/chainguar…
1
5
23
3,187
Ever thought about doing feature flags with GitOps? Well, you’re in luck! Join us on Nov 17th as we explore @flipt_io with @mark_a_phelps RSVP by joining our brand new website! rawkode.academy/event-detail…
3
1
6
1,431
TheNullChannel retweeted
PSA: If you're seeing the Critical zlib CVE-2023-45853 in your docker images, we've patched it in @wolfi_os! Try out @chainguard_dev images for cleaner scan results!
5
13
5,580
TheNullChannel retweeted
🥳🎂 We just passed one one year since GA!! A whole year of running a free public good service by our community SREs! Protecting the OSS supply chain 🎂🥳
11
6
40
6,954
TheNullChannel retweeted
Critical CVE in zlib time! This looks like it's in a "contrib" package so it's not officially supported, but there's a straightforward patch and it's definitely going to start lighting up scanners all over the place. nvd.nist.gov/vuln/detail/CVE…
1
3
17
8,671
TheNullChannel retweeted
KubeHuddle - Day 1 - ControlPlane Track youtu.be/cdEfbrzRuoc via @YouTube
7
2
24