Sign in

Michael Lieberman

@mikeneeds.rest
228 followers 182 following 53 posts

Software supply chain security

PostsRepliesMedia
Reposted by Michael Lieberman
Giant Cats of Dunbar 🏴󠁧󠁢󠁳󠁣󠁴󠁿 @giantcatsdunbar.bsky.social · 21/08/2026
>ARCHIVE: 1/1/24 >spotted by: thikas_shitus; >bleaching field community centre & library; >56.000456,-2.520825; 1434hrs
0774
Reposted by Michael Lieberman
Stephen Augustus (he/him) @auggie.dev · 27/06/2026
something, something software supply chain security cc: @mikeneeds.rest @mauilion.dev
0102
Michael Lieberman @mikeneeds.rest · 16/04/2026
I can't get enough of the new Massive Attack/Tom Waits collab. youtu.be/kVTVWRaAImM?...
youtu.be
Boots on the Ground
YouTube video by Massive Attack - Topic
000
Reposted by Michael Lieberman
Michaela Joffe @joffeorama.bsky.social · 12/04/2026
The Calvin's dad explaining records meme. He is explaining that the two kinds of meme are Calvin's dad and Loss. Despite being a meme about Calvin's dad, this one is Loss.
10289092831
Michael Lieberman @mikeneeds.rest · 10/04/2026
Anyone else notice the Project Glasswing announcements feel like grindhouse marketing? "Banned in 40 countries" "Results so shocking..."
000
Michael Lieberman @mikeneeds.rest · 02/02/2026
I imagine a future where the burden of having hot takes are handled safely by AI.
010
Reposted by Michael Lieberman
MinnMax @minnmax.com · 27/01/2026
"You raise your voice, I erase your voice." ICE in Minneapolis are erasing your rights. Please share our new video of what's happening in our city. youtu.be/W1dyNcRGRXY
1271112406044
Michael Lieberman @mikeneeds.rest · 12/01/2026
I agree there. They did throw out some plans around stuff like sovereign tech funds, especially ones that focus on OSS investment. An issue that myself and others brought up is the funds were focused on individuals, and the important projects are supported whether people like it or not by companies.
010
Michael Lieberman @mikeneeds.rest · 11/01/2026
I was at an EU meeting on this in October. I think it’s communicated poorly but the idea is essentially to promote more open source with EU companies and citizens as maintainers. It’s as part of the bigger push for digital sovereignty that includes more data centers and commercial investment.
120
Reposted by Michael Lieberman
derek guy @dieworkwear.bsky.social · 05/01/2026
amazing how the entire machine can pivot within 24 hours. no need to slowly upsell the argument; just issue new marching orders
Matt Walsh tweeted last year: "We've spent the last 25 years bringing "freedom" and "democracy" to countries around the globe while our own country has been systematically invaded and now our largest cities are run by foreigners and communists. If you want to know why I'm so avowedly non-interventionist, this is why."

Then he tweeted today: ""This is a war for oil!!!!!"

First of all, the "war" lasted like 90 minutes. Second, going to war to secure vital resources for your own people is totally legitimate. Why should we allow some third world communist shithole to control trillions of dollars worth of oil?"Laura Loomer tweeted last year: "I’m America First, I don’t support “Regime Change”. I went on @Bannons_WarRoom to talk about Chinese aggression in Venezuela and why we need to designate the Muslim Brotherhood as a foreign Islamic terrorist organization."

Then she tweeted yesterday: "Maduro has arrived at the DEA office in Manhattan. He was transported in an armored motorcade after being transported in a blindfold via helicopter & then by plane to New York after his compound in Caracas was raided by US Special Forces.

Proud to be an American today!

USA 🇺🇸"Catturd tweeted last year: "Name one U.S. inspired regime change that hasn’t ended in absolute disaster."

Then he tweeted yesterday: "Venezuela is now more free than New York City."Will Chamberlain tweeted last year: "The Republican Party is no longer the party of regime change and endless wars

If you want to be its standard-bearer that is a non-negotiable position"

Then he tweeted yesterday: "I can think of few better uses of my tax dollars than black-bagging the head of a foreign narco-trafficking organization that enriches itself by addicting and poisoning my fellow Americans"
586269147869
Michael Lieberman @mikeneeds.rest · 31/12/2025
For a country that hates bureaucracy, all of a sudden dotting the i’s and crossing the t’s matters with stuff like immigration, and social welfare benefits.
010
Michael Lieberman @mikeneeds.rest · 17/11/2025
Are brain worms contagious?
031
Reposted by Michael Lieberman
Rachel Leggett @rleggos.bsky.social · 13/11/2025
So when the aurora borealis is faint enough, you can capture its glow with the Milky Way 😍 Berthoud Pass, CO last night
Milky Way to the left and red glow to the right above mountains with just a little snow on them in a very starry sky. I didn't use a star tracker and this was a 30 second exposure so some star trailing is visible.
844212606
Reposted by Michael Lieberman
Alex Lawson @alaw202.bsky.social · 06/11/2025
I had a run in with ICE snatching a man out of his car while walking my children to school this morning in NW DC I asked a neighbor to continue walking my kids to school and I turned back to document and confront the ICE agents. I am in contact with @dcmigrantmutualaid.org with the full video.
1113180375956
Reposted by Michael Lieberman
OpenSSF @openssf.org · 22/10/2025
The global push for #SBOM standards is reshaping how we approach cybersecurity and transparency. 🌍 Explore how the EU #CRA, CISA, and @OpenSSF efforts are aligning global software supply chain security. openssf.org/blog/2025/10...
041
Michael Lieberman @mikeneeds.rest · 23/09/2025
Shellshock had one en.m.wikipedia.org/wiki/Shellsh...
en.m.wikipedia.org
Shellshock (software bug) - Wikipedia
120
Reposted by Michael Lieberman
OpenSSF @openssf.org · 22/09/2025
How to contribute your first line of code to open source? Contributing to the OpenSSF #community isn’t just about code, it’s about building trust, learning how secure software is built, and growing your career. Read the blog and take your first step: openssf.org/blog/2025/08...
051
Michael Lieberman @mikeneeds.rest · 06/09/2025
Seasonal allergies can cause eyelid twitching. I get it around spring and fall.
020
Reposted by Michael Lieberman
kat cosgrove @kat.lol · 14/08/2025
The usefulness of an open source project is not an indication of the project's health, stability, or reliability in production!!!! AHHHHHHHHHHHHHHHHH
41049
Michael Lieberman @mikeneeds.rest · 23/06/2025
Are some large enterprises acting like ignorant children? 🤔
060
Michael Lieberman @mikeneeds.rest · 22/06/2025
If I'm writing a personal project? I'm a little bit more flexible. If I'm working on something for my employer, I'm looking at the risks. A sandbox research project is going to go through different scrutiny than something like an online banking application.
010
Michael Lieberman @mikeneeds.rest · 22/06/2025
I think the way Europe is looking at this with the CRA is also something to look at. Europe says in your example it's still the responsibility of the organization consuming the OSS to ensure it meets the regulation.
010
Michael Lieberman @mikeneeds.rest · 22/06/2025
Open source in and of itself is just code thrown out to the public with no warranty. Some of it is good, some bad. In your example if, maybe I would look at a different project or buy it from a reputable organization instead of something with few maintainers.
110
Michael Lieberman @mikeneeds.rest · 22/06/2025
Yes absolutely. People leave up all sorts of stuff. Unless you are purposefully misleading folks it's up to the consumer to do some level of due diligence. I have worked at massive banks where there were policies in place to prevent including that sort of stuff.
1120
Michael Lieberman @mikeneeds.rest · 22/06/2025
It is still the responsibility of the consumer. Full stop.
180
Michael Lieberman @mikeneeds.rest · 18/06/2025
I was interviewed recently about Kusari's new security PR bot. Check it out!
thenewstack.io
Startup Embeds AI Security Analysis in Dev Workflow
Kusari Inspector analyzes dependencies and code changes during pull requests, providing devs with actionable go/no-go recommendations before code merges.
042
Reposted by Michael Lieberman
Xe @xeiaso.net · 21/05/2025
948188
Michael Lieberman @mikeneeds.rest · 20/05/2025
I recently wrote my thoughts on why we should focus more on securely consuming open source than trying to enforce the trustworthiness of devs mikeneeds.rest/license-to-n... Since some folks aren't familiar with satire, this is satire, this is tongue in cheek, please don't take this too seriously :).
mikeneeds.rest
License to `npm install`? Why do we burden our road builders when the drivers are drunk at the wheel? | Michael Lieberman
Alright, let's talk about the digital world we've built. It runs on open source software (OSS). Your phone, your cat's smart litter box, the thing that tells you pizza is on the way – all powered in l...
030
Michael Lieberman @mikeneeds.rest · 15/05/2025
I wonder how many people know you can install non-python code via pip and the like? I know most package managers support some level of arbitrary downloading of static content and most have also some level of arbitrary code execution on build/install.
110
Reposted by Michael Lieberman
OpenSSF @openssf.org · 14/05/2025
The new #Cybersecurity Skills Framework maps 14 core job roles to real-world security skills. ✅ Built by practitioners ✅ Easy to customize ✅ Standards-aligned 🔗 Launch the free tool: cybersecurityframework.io 📰 Read more: openssf.org/press-releas...
002
Reposted by Michael Lieberman
Giant Bomb @giantbomb.com · 11/05/2025
Giant Bomb lives! Fandom has sold the site to us and it is now fully independent and employee-owned. We'll see you all on Tuesday for the Giant Bombcast. For more info right now, head over to www.giantbomb.com/join
565145313429
Reposted by Michael Lieberman
niki grayson @nikigrayson.com · 01/05/2025
polygon and giant bomb dead in the same week is just unfathomable
452984500
Michael Lieberman @mikeneeds.rest · 23/04/2025
Cat
Cat lying down with bread neck pillowClose up photo of orange cat wearing bread neck pillow
050
Reposted by Michael Lieberman
Corey Quinn @quinnypig.com · 18/04/2025
Because they clearly don’t have a vision. They’re ruining their flagship product to chase after something consumers by and large don’t want.
2355
Reposted by Michael Lieberman
Eddie Knight @eddieknight.dev · 16/04/2025
Here's a playlist with the 7 KubeCon talks from TAG Security leads! Seven!! 🤯 @mikeneeds.rest @sublimi.no www.youtube.com/playlist?lis...
youtube.com
TAG Security @ KubeCon EU 2025 - YouTube
072
Reposted by Michael Lieberman
Eddie Knight @eddieknight.dev · 14/04/2025
This is it, @mikeneeds.rest. The high water mark. The peak. The climax. The apex. It only goes down from here.
Average Score in the session feedback: 10 out of 10.
031
Reposted by Michael Lieberman
OpenSSF @openssf.org · 09/04/2025
🚨 OpenSSF community is heading to Denver for #OpenSSFCommunity Day NA 2025 on June 26! AI security, SBOM tooling, real-world TTX, and more — all in one day. 🌄 Co-located with #OSSummit 🛡️ Agenda is live — register now! 🔗 openssf.org/blog/2025/04... #CyberSecurity #OpenSourceSecurity
041
Reposted by Michael Lieberman
Stephen Augustus (he/him) @auggie.dev · 08/04/2025
Love when companies post about being major contributors to #opensource projects after laying off a ton of core contributors to those projects!
910916
Michael Lieberman @mikeneeds.rest · 07/04/2025
I think it’s more an LHR experience. That airport always just seems so disorganized across the board.
100
Michael Lieberman @mikeneeds.rest · 05/04/2025
I got there early, it was pretty empty, went to the bathroom, got out and it was absolutely packed. No seats, people just standing around.
100
Michael Lieberman @mikeneeds.rest · 04/04/2025
I’m around all day if anyone wants to chat more about it! Ping me on cncf slack or stop by the Kusari booth.
020
Michael Lieberman @mikeneeds.rest · 04/04/2025
Thanks! I appreciate the kind words.
010
Reposted by Michael Lieberman
Alexis "Horgix" Chotard @horgix.fr · 04/04/2025
A keynote about the EU Cyber Resilience Act at the #KubeCon #CloudNativeCon EU couldn't be more appropriate! Happy to see it there and that we start collectively discussing the implications, how to comply, etc.! Thanks @eddieknight.dev and @michaellieberman.bsky.social for bringing that topic 🙂
252
Reposted by Michael Lieberman
Ben Cotton (he/him) @funnelfiasco.bsky.social · 02/04/2025
Are you confused about the CRA? Check out @mikeneeds.rest and @eddieknight.dev's #KubeCon keynote on Friday morning.
031
Reposted by Michael Lieberman
Acyn @acyn.bsky.social · 21/03/2025
AOC: I want to live in an America that guarantees healthcare to every person. I want to live in an America that has a living wage for every person I want to live in an America where you have free speech to express yourself and not be afraid of being put on a list or deported.
11847085514503
Reposted by Michael Lieberman
kat cosgrove @kat.lol · 19/03/2025
I'm looking for my next thing, and I need to move fast. I have several years of experience in developer relations from startups to the enterprise, and I'm particularly skilled at distilling complex topics into something easily understood by newbies and non-technical folks alike, on stage or off. 1/3
6344206
Michael Lieberman @mikeneeds.rest · 14/03/2025
Resign.
010
Reposted by Michael Lieberman
WIRED @wired.com · 04/03/2025
If you're wondering where we stand on politics coverage, we're not slowing down, or stopping anytime soon. Some words from our Global Editorial Director @katie-drummond.bsky.social:
241991294
Reposted by Michael Lieberman
Mihai Maruseac @mihai.page · 04/03/2025
After testing OpenAI and Gemini models on the 3 puzzle problems proposed in January on my blog, it is time to look at how Claude models answer them. Tested only versions 3 and 3.5 since I ran the scripts back in Jan, but even so the models performed quite well. More on my blog: mihai.page/ai-2025-5
mihai.page
How do Claude models perform on the 2025 AI puzzle competition?
In this article I read 2.5 million characters output by Claude models to score them on the 3 problems I proposed in the previous articles.
022
Reposted by Michael Lieberman
The Kyiv Independent @kyivindependent.com · 28/02/2025
It’s time to say it plainly. America’s leadership has switched sides in the war. The American people have not, and they should speak up.
kyivindependent.com
Editorial: A president just disrespected America in the Oval Office. It wasn’t Zelensky
It’s time to say it plainly. America’s leadership has switched sides in the war. The American people have not, and they should speak up. In the past several weeks, the U.S. leadership has demonstrate...
31387462418