iiinova — where your digital self keeps evolving

Reposted by Ilkka Turunen

Brian Fox @brianfox.bsky.social · 08/09/2025

Our malware systems at Sonatype seem to be picking these up coming from other, not yet reported accounts. This attack seems to have landed more publishers as this unfolds. Check your accounts folks while we work with others to contain.

294

Reposted by Ilkka Turunen

Josh Junon @bad-at-computer.bsky.social · 08/09/2025

Yep, I've been pwned. 2FA reset email, looked very legitimate. Only NPM affected. I've sent an email off to @npmjs.bsky.social to see if I can get access again. Sorry everyone, I should have paid more attention. Not like me; have had a stressful week. Will work to get this cleaned up.

1518658

Ilkka Turunen @ilkka.turunen.dev · 05/12/2024

The web3.js compromise is a good example of legitimate library poisoning attacks. Sounds like a maintainer account was phished or an access token compromised. Basically any developer machine that installed this should be considered compromised github.com/solana-labs/...

github.com

Releases · solana-labs/solana-web3.js

Solana JavaScript SDK. Contribute to solana-labs/solana-web3.js development by creating an account on GitHub.

010

Ilkka Turunen @ilkka.turunen.dev · 20/11/2024

These are going to be big changes in the way we all do our work

020

Reposted by Ilkka Turunen

Mikael Barbero @mikael.barbero.tech · 20/11/2024

The Cyber Resilience Act (aka CRA, aka Regulation (EU) 2024/2847) has been published in the Official Journal of the European Union eur-lex.europa.eu/legal-conten...

eur-lex.europa.eu

Regulation - 2024/2847 - EN - EUR-LexLog inEnglish

111

Reposted by Ilkka Turunen

Ben Collins @bencollins.bsky.social · 14/11/2024

Hi everyone. The Onion, with the help of the Sandy Hook families, has purchased InfoWars. We are planning on making it a very funny, very stupid website. We have retained the services of some Onion and Clickhole Hall of Famers to pull this off. I can't wait to show you what we have cooked up.

nytimes.com

The Onion Buys Alex Jones’s Infowars Out of Bankruptcy

The satirical news site planned to turn Infowars into a parody of itself, mocking “weird internet personalities” who peddle conspiracy theories and health supplements.

23225864715920

Ilkka Turunen @ilkka.turunen.dev · 25/10/2024

I’m going to continue as i do on the other socials, posting what’s interesting to me. In this case that the SEC is going after companies that minimise cyber incidents, at least in the publicly traded realm. Not a huge hit to any one of them tho www.sec.gov/newsroom/pre...

sec.gov

SEC.gov | SEC Charges Four Companies With Misleading Cyber Disclosures Lock

010

Ilkka Turunen @ilkka.turunen.dev · 24/10/2024

As one of the authors of the report that is cited in the article - the vulnerability count is a yard stick of popularity of open source. Last year we reported that OSS projects are actually WAY better at applying & producing security patches vs closed source and industry

1249

Ilkka Turunen @ilkka.turunen.dev · 24/10/2024

I do have to admit the air is so much cleaner here compared to the toxic smog over at Xitter. So nice to see actual tech twitter again

240

Reposted by Ilkka Turunen

Kelsey Hightower @kelseyhightower.com · 24/10/2024

I haven't been this excited about social media since 2011.

1868635

Ilkka Turunen @ilkka.turunen.dev · 12/10/2023

There is a new 'Rapid Reset' Vulnerability described by Cloudflare this week that affects the HTTP2 protocol. This implementation of HTTP2 is pretty widespread in different OSS libraries and embedded servers. Great writeup here blog.sonatype.com/10-open-sour...

000

Ilkka Turunen @ilkka.turunen.dev · 03/10/2023

Huge news to share - we’re live with our 9th State of the Software Supply Chain report. 1 in 8 downloads contain some documented risk - and most of that could easily be avoided! Read the whole package here 👉 bit.ly/3LMRXo6

132

Ilkka Turunen @ilkka.turunen.dev · 25/07/2023

Hello world. Is this the federated social media to rule them all then?

000