Uploaded some pictures of the sf fleet week airshow.

https://www.flickr.com/photos/darakian/55584560527/in/dateposted-public/

A huge amount of time is spent simply mapping advisories to build artifacts which organizations care about and while curating with package taxonomies works, the curation cost scales linearly with the number of taxonomies. Practically speaking data collection will be limited in scope as a result.

However, the cost of curating vuln data with commits is decoupled from the cost of mapping those commits to packages. Mapping isn't free, but here's a demo of how it could work

https://codeberg.org/darakian/provenance-demo

Not that preying on parents hope for their children is new or anything but wow. I look forward to the teenage rebellion phase of the kids subjected to these robo nannies

#defcon finally got canceled 🥲

Want to help build the world's best library of security information? Come work with me :)

https://boards.greenhouse.io/github/jobs/5083241