supply chain

subscribe via RSS

Page 1 of 3

Some things I found interesting between 2026-05-24 and 2026-05-31

Internet Discoveries between 24 and 31 May

  • Megalodon chums the waters in 5.5K+ GitHub repo poisonings
  • Saturday Morning Breakfast Cereal - Cave
  • Saturday Morning Breakfast Cereal - Bonzo
  • Anthropic adds 28 security and compliance integrations for Claude - Help Net Security
  • Saturday Morning Breakfast Cereal - Gates
  • The Forgotten Art of the LAN Party (2023)
  • I built a Git-tracked book production pipeline
  • DynIP – Dynamic DNS with RFC 2136, IPv6, DNSSEC, and BYOD
  • Earthion: A New Mega Drive-Style Shoot-Em-Up
  • How Shamir’s Secret Sharing Works
  • Using AI to write better code more slowly
  • LAN-LOK: The Antarctic DOS Sabotage Game Lost for 34 Years
  • The four-day workweek in Australia: insights from early adopters of 100:80:100
  • Usborne 1980s Computer Books
  • Sleep research led to a new sleep apnea drug
  • Saturday Morning Breakfast Cereal - AI
  • Saturday Morning Breakfast Cereal - Meaning
  • Introducing dynamic workflows - Claude
  • Saturday Morning Breakfast Cereal - Debunking
  • How we contain Claude across products \ Anthropic
  • Saturday Morning Breakfast Cereal - Free
  • Pandoc Templates
  • Claude Code – Everything you can configure that the docs don’t tell you
  • Claude Opus 4.8
  • Last.fm is now independent

Some things I found interesting between 2026-05-17 and 2026-05-24

Internet Discoveries between 17 and 24 May

  • Saturday Morning Breakfast Cereal - Experiencing
  • Project Glasswing: what Mythos showed us
  • Saturday Morning Breakfast Cereal - Criminal
  • CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security
  • Saturday Morning Breakfast Cereal - Sick
  • Saturday Morning Breakfast Cereal - Trash
  • Investigating unauthorized access to GitHub-owned repositories - The GitHub Blog
  • Saturday Morning Breakfast Cereal - Back
  • Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised - Real-time Open Source Software Supply Chain Security
  • Saturday Morning Breakfast Cereal - Ex
  • Project Glasswing: An initial update \ Anthropic
  • Saturday Morning Breakfast Cereal - Safe
  • Megalodon chums the waters in 5.5K+ GitHub repo poisonings
  • Saturday Morning Breakfast Cereal - Cave

Some things I found interesting between 2026-05-17 and 2026-05-24

Internet Discoveries between 17 and 24 May

  • Saturday Morning Breakfast Cereal - Experiencing
  • Project Glasswing: what Mythos showed us
  • Saturday Morning Breakfast Cereal - Criminal
  • CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security
  • Saturday Morning Breakfast Cereal - Sick
  • Saturday Morning Breakfast Cereal - Trash
  • Investigating unauthorized access to GitHub-owned repositories - The GitHub Blog
  • Saturday Morning Breakfast Cereal - Back
  • Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised - Real-time Open Source Software Supply Chain Security
  • Saturday Morning Breakfast Cereal - Ex
  • Project Glasswing: An initial update \ Anthropic
  • Saturday Morning Breakfast Cereal - Safe
  • Megalodon chums the waters in 5.5K+ GitHub repo poisonings
  • Saturday Morning Breakfast Cereal - Cave

Some things I found interesting between 2026-05-10 and 2026-05-17

Internet Discoveries between 10 and 17 May

  • Let’s Encrypt Halts Certificate Issuance After Cross-Signed Root Certificate Incident
  • Reality Check - Deepfakes are everywhere. The godfather of digital forensics is fighting back
  • Rotten Dot Com by Dena Yago
  • Saturday Morning Breakfast Cereal - Terminal
  • Demystifying evals for AI agents \ Anthropic
  • Saturday Morning Breakfast Cereal - Arp
  • Mythos finds a curl vulnerability - daniel.haxx.se
  • Claude Platform on AWS
  • Postmortem: TanStack NPM supply-chain compromise
  • Red Hot Chili Peppers ink $300M deal with Warner Music to sell catalog
  • Space Cadet Pinball on Linux
  • Running local models on an M4 with 24GB memory
  • Incident Report: CVE-2024-YIKES
  • Local AI needs to be the norm
  • Idempotency is easy until the second request is different
  • Local privilege escalation via execve()
  • Saturday Morning Breakfast Cereal - Sport
  • See Artemis 2’s amazing views of Earth in timelapse video taken from 12,000-photo drop - Space
  • Saturday Morning Breakfast Cereal - Tide
  • Casus Belli Engineering — mmagueta
  • Saturday Morning Breakfast Cereal - Hierarchy
  • Saturday Morning Breakfast Cereal - Bot
  • I believe there are entire companies right now under AI psychosis
  • Project Gutenberg – keeps getting better
  • Show HN: Find the best local LLM for your hardware, ranked by benchmarks
  • New Nginx Exploit
  • Removing the modem and GPS from my 2024 RAV4 hybrid
  • Claude for Small Business
  • Scorched Earth 2000 – Web
  • Xs of Y – roguelike that names itself every run. Written in 4kLoC
  • SecurityBaseline.eu
  • The Future of Obsidian Plugins
  • Saturday Morning Breakfast Cereal - Experiencing

Some things I found interesting from 2026-03-29 to 2026-04-05

Internet Discoveries between 29 March and 5 April

  • Idealized Design, Systems Thinking, and a Model for OutlierInnovation, by Dr. Russell Ackoff - YouTube
  • Saturday Morning Breakfast Cereal - Water
  • FBI confirms hack of Director Patel’s personal email inbox
  • Iran-linked hackers deliver ultimatum to Lockheed Martin staff – Australian Aviation
  • Saturday Morning Breakfast Cereal - Humanities
  • GitHub - gsd-build/get-shit-done: A light-weight and powerful meta-prompting, context engineering and spec-driven development system for Claude Code by TÂCHES. · GitHub
  • GitHub - gsd-build/gsd-2: A powerful meta-prompting, context engineering and spec-driven development system that enables agents to work for long periods of time autonomously without losing track of the big picture · GitHub
  • Claude Code’s Entire Source Code Was Just Leaked via npm Source Maps — Here’s What’s Inside - DEV Community
  • axios@1.14.1 and axios@0.30.4 are compromised · Issue #10604 · axios/axios · GitHub
  • Saturday Morning Breakfast Cereal - Up
  • ccleaks — Claude Code Hidden Features
  • GitHub - awslabs/mcp: Official MCP Servers for AWS · GitHub
  • 4D Doom
  • Claude Code’s source code has been leaked via a map file in their NPM registry
  • The Claude Code Source Leak: fake tools, frustration regexes, undercover mode
  • The curious case of retro demo scene graphics
  • Copilot edited an ad into my PR
  • I Quit. The Clankers Won
  • Saturday Morning Breakfast Cereal - Loot
  • Saturday Morning Breakfast Cereal - Special
  • Saturday Morning Breakfast Cereal - Bad
  • Artemis II crew take ‘spectacular’ image of Earth
  • Saturday Morning Breakfast Cereal - Super
  • Iranian missile blitz takes down AWS data centers in Bahrain and Dubai — Amazon reportedly declares “hard down” status for multiple zones - Tom’s Hardware

Some things I found interesting from 2026-03-15 to 2026-03-22

Internet Discoveries between 15 and 22 March

  • GitHub - github/copilot-cli: GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal. · GitHub
  • GitHub - mistralai/mistral-vibe: Minimal CLI coding agent by Mistral · GitHub
  • It’s time to move your docs in the repo
  • Saturday Morning Breakfast Cereal - Machine
  • Astronomers Just Watched Two Planets Smashing Into Each Other 11,000 Light-Years Away
  • Nathan Fillion Says ‘Firefly’ Animated Series In Development
  • The 49MB web page
  • What is agentic engineering?
  • Scientists discover a surprising way to quiet the anxious mind (2025)
  • LoKI – Local AI Assistant for Linux and WSL
  • Saturday Morning Breakfast Cereal - Under
  • opencode.ai
  • Leanstral: Open-source agent for trustworthy coding and formal proof engineering
  • VulHunt: Open-source vulnerability detection framework - Help Net Security
  • Grace Hopper’s Revenge
  • Saturday Morning Breakfast Cereal - Philosophy
  • Siril image editor: One of the best pieces of open-source software available for astrophotographers - Space
  • Saturday Morning Breakfast Cereal - Where
  • Switzerland built an alternative to BGP. Nobody noticed • The Register
  • Warranty Void If Regenerated
  • A sufficiently detailed spec is code
  • OpenRocket
  • Saturday Morning Breakfast Cereal - Love
  • Wayland set the Linux Desktop back by 10 years?
  • Push events into a running session with channels
  • Astral to Join OpenAI
  • Drawvg Filter for FFmpeg
  • Saturday Morning Breakfast Cereal - Waiting
  • TeamPCP deploys CanisterWorm on NPM following Trivy compromise
  • Saturday Morning Breakfast Cereal - Congrats
  • Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords
  • Welcome to the Block Universe
  • Floci – A free, open-source local AWS emulator
  • Trivy Security incident 2026-03-19
  • Trivy ecosystem supply chain briefly compromised
  • Show HN: Atomic – Self-hosted, semantically-connected personal knowledge base
  • Electronics for Kids, 2nd Edition
  • Show HN: Termcraft – terminal-first 2D sandbox survival in Rust
  • Attempts to post the latest Trivy security incident have been marked [dead]
  • Some things just take time

Some things I found interesting from 2026-02-22 to 2026-03-01

Internet Discoveries between 22 February and 1 March

  • How far back in time can you understand English?
  • I verified my LinkedIn identity. Here’s what I handed over
  • EDuke32 – Duke Nukem 3D (Open-Source)
  • A Botnet Accidentally Destroyed I2P
  • How I use Claude Code: Separation of planning and execution
  • Scientists discover recent tectonic activity on the moon
  • The SRE Report 2026
  • Back to FreeBSD: Part 1
  • Open-Source Community Launches MinIO Fork
  • Using the new bridges of FreeBSD 15
  • I built Timeframe, our family e-paper dashboard
  • Freemediaheckyeah
  • The Age Verification Trap: Verifying age undermines everyone’s data protection
  • Diode – Build, program, and simulate hardware
  • Claude Code Remote Control
  • The Om Programming Language
  • Making MCP cheaper via CLI
  • Jimi Hendrix was a systems engineer
  • The RomM Project
  • Show HN: Deff – Side-by-side Git diff review in your terminal
  • Museum of Plugs and Sockets
  • The Hunt for Dark Breakfast
  • NASA announces overhaul of Artemis program amid safety concerns, delays
  • Rob Grant, creator of Red Dwarf, has died
  • Reading English from 1000 AD
  • Get free Claude max 20x for open-source maintainers
  • Leaving Google has actively improved my life
  • Dan Simmons, author of Hyperion, has died
  • Hyprland 0.54 Released As A "Massive" Update To This Wayland Compositor - Phoronix
  • Statement on the comments from Secretary of War Pete Hegseth
  • Verified Spec-Driven Development (VSDD)
  • Show HN: Context Mode – 315 KB of MCP output becomes 5.4 KB in Claude Code
  • MCP server that reduces Claude Code context consumption by 98%

Some things I found interesting from 2026-02-08 to 2026-02-15

Internet Discoveries between 8 and 15 February

  • GitHub - pydantic/monty: A minimal, secure Python interpreter written in Rust for use by AI
  • Show HN: LocalGPT – A local-first AI assistant in Rust with persistent memory
  • The Little Bool of Doom (2025)
  • Vouch
  • I put Claude Code inside Obsidian, and it was awesome
  • AI gold rush sees tech firms embracing 72-hour weeks
  • Zulip.com Values
  • Fun With Pinball
  • Ex-GitHub CEO launches a new developer platform for AI agents
  • The Day the Telnet Died
  • The Feynman Lectures on Physics (1961-1964)
  • Windows Notepad App Remote Code Execution Vulnerability
  • Discord/Twitch/Snapchat age verification bypass
  • Single bone in Spain offers first direct evidence of Hannibal’s war elephants
  • Warcraft III Peon Voice Notifications for Claude Code
  • Using an engineering notebook
  • The Missing GitHub Status Page
  • Gemini 3 Deep Think
  • GPT‑5.3‑Codex‑Spark
  • AI agent opens a PR write a blogpost to shames the maintainer who closes it
  • An AI agent published a hit piece on me
  • GitHub - s2-streamstore/claude-batch-toolkit: Send non-urgent work to the Anthropic Batch API at 50% cost — directly from Claude Code
  • An AI Agent Published a Hit Piece on Me – More Things Have Happened
  • Sandwich Bill of Materials
  • Show HN: SQL-tap – Real-time SQL traffic viewer for PostgreSQL and MySQL
  • Show HN: Data Engineering Book – An open source, community-driven guide
  • Genuine RAAF WWII bunker for sale an hour from Brisbane - realestate.com.au
  • YouTube as Storage
  • Backblaze Drive Stats for 2025
  • Hasbro Celebrates ‘Transformers: The Movie’ by Apologizing for It
  • The Israeli Spyware Firm That Accidentally Just Exposed Itself
  • IBM tripling entry-level jobs after finding the limits of AI adoption
  • Descent, ported to the web
  • Zvec: A lightweight, fast, in-process vector database
  • A practical guide to observing the night sky for real skies and real equipment
  • Oat – Ultra-lightweight, semantic, zero-dependency HTML UI component library
  • NewPipe: YouTube client without vertical videos and algorithmic feed

Some things I found interesting from 2026-01-11 to 2026-01-18

Internet Discoveries between 11 and 18 January

  • Claude Code with Anthropic API compatibility · Ollama Blog
  • 6-Day and IP Address Certificates Are Generally Available
  • Inside The Internet Archive’s Infrastructure
  • Show HN: OpenWork – An open-source alternative to Claude Cowork
  • Found: Medieval Cargo Ship – Largest Vessel of Its Kind Ever
  • Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console
  • How much of my observability data is waste?
  • Show HN: Webctl – Browser automation for agents based on CLI instead of MCP
  • LMArena - Benchmark & Compare the Best AI Models
  • OpenRouter
  • Honest Trailers - The Lord of the Rings: The Fellowship of the Ring
  • The chess bot on Delta Air Lines will destroy you (2024) [video]
  • Cowork: Claude Code for the rest of your work
  • Floppy disks turn out to be the greatest TV remote for kids
  • Ansible battle tested hardening for Linux, SSH, Nginx, MySQL
  • Open Chaos: A self-evolving open-source project
  • GitHub - kepano/obsidian-skills: Claude Skills for Obsidian
  • Finding and fixing Ghostty’s largest memory leak
  • Show HN: I used Claude Code to discover connections between 100 books

Some things I found interesting from 2025-09-07 to 2025-09-14

Internet Discoveries between 7 and 14 September

  • How to Use Claude Code Subagents to Parallelize Development - zach wills
  • GitHub - iannuttall/fartscroll-lid: A hilarious macOS app that plays fart sounds as you open and close your MacBook lid
  • DOOMscroll — The Game
  • We all dodged a bullet - Xe Iaso
  • The story of Creative Technology
  • The Demo Scene is Dying, But That’s Alright - datagubbe.se
  • GitHub - docker/cagent: Agent Builder and Runtime by Docker Engineering