Viewing profile — livealight

Very neat! Did a similar project with AI generated images. Fun for days with this kind of cheap hardware!

Thanks! It definitely passed the weekend well - do share if you end up building it!

A little hack put together over a weekend. Nice interesection of AI and physical devices.

It let log4j pass for as long as it was known to be good. Within hours of the CVE opening the tool was blocking it. The purpose of dependency firewalls is to avoid two things: know…

This exact same sentiment came through in the National Cyber Security Strategy the US released. It describes a minimum acceptable level of software development, called safe harbour…

Nexus Lifecycle / Nexus Auditor tends to be useful for this - in absence of a package.json it crawls the raw js files and finds their source. It can help figure out things like emb…

insert obligatory node_modules joke here

Yeah oddly the outcome of MTTU is a maintained transitive tree seems to be a better indicator of security status than any other more complex framework. How to do it effectively is …

Lift works well - http://lift.sonatype.com

seems to work now