korrents

A korrentour readingWhat is a korrent?

Dependency cooldowns are currently the best defense against supply chain attacks via compromised package publishers.

Drawn from what Simon Willison said

Subjectsopen sourcecybersecurity
What this subject means

cybersecurity Attack and defence in software: vulnerabilities, hardening, and what changes when a model is good at finding them.

What Simon Willison actually said

Word for word, with the source under each one. They did not write this page.

  1. Simon Willison

    Co-creator of Django and creator of Datasette

    I guess our best defense right now is dependency cooldowns - giving new package releases a few days before upgrading to them, in the hope that supply chain attacks like this will be spotted by someone else.

    Where this was said

    ↗Be alert: targeted attacks on prominent Rustaceanssimonwillison.net

Added to korrents 17 Sept 2026 · How quotes work · Something wrong? Tell us

Do you hold this korrent?Do you also believe this?

Sign in to record that you hold this, with a confidence number of your own.

Related korrents

Our reading — they may agree, disagree or merely touch the same thing. Closest first: a shared subject counts for most, then how near the wording is.

On the map

Loading the map… or open it on its own page

Open the map on its own page →