6 ms·
The $100M in credits for open-source scanning is the most interesting part here. The real bottleneck was never finding vulns in high-profile projects — it was t
by jiusanzhou 5mo ago
The $100M in credits for open-source scanning is the most interesting part here. The real bottleneck was never finding vulns in high-profile projects — it was the long tail of critical dependencies maintained by one or two people who don't have time or resources for serious auditing. If Glasswing actually reaches those maintainers, it could meaningfully reduce the attack surface that supply chain attacks exploit.
- jusling 5mo agoso it looks like ai-slop replies have made their way to HN...
- junofan 5mo agoUnfortunate. I’m so sick of hearing what things are not, or what’s real, or what’s interesting.
- m132 5mo agoI must say the combo of an em-dash stuck right in the middle of "it was never X, it was Y" made me chuckle