korrents

Our readingWhat is a korrent?

Dependency cooldowns, waiting a few days before upgrading to new package releases, are probably the best current defense against supply chain attacks.

Drawn from what Simon Willison said

Subjectsopen sourcecybersecurity
What this subject means

cybersecurity Attack and defence in software: vulnerabilities, hardening, and what changes when a model is good at finding them.

What Simon Willison actually said

  1. Simon Willison Co-creator of Django and creator of Datasette
    I guess our best defense right now is dependency cooldowns - giving new package releases a few days before upgrading to them, in the hope that supply chain attacks like this will be spotted by someone else.

    ↗Be alert: targeted attacks on prominent Rustaceanssimonwillison.net

    17 Sept 2026

Added to korrents 18 Sept 2026 · How quotes work · Something wrong? Tell us

Do you hold this korrent?Do you also believe this?

I hold this too

Related korrents

Shared subject first, then similar wording. They may agree or disagree.

See this claim on the map