50 Matching Annotations
  1. Last 7 days
    1. The median JavaScript project on GitHub has 755 transitive dependencies

      这一数据点极具洞察力,指明了现代软件架构的根本性脆弱点:真正的防线不再是你的业务代码,而是你从未审查过的传递依赖网络。开发者往往只关注直接引入的包,却忽略了依赖树深处的暗箱,这正是供应链攻击能够“顺藤摸瓜”造成大面积杀伤的底层逻辑。

  2. Apr 2026
    1. We are building a world where machines write the code, machines choose the dependencies, and machines ship the updates. The AI agents are building the software. If we don't secure the supply chain they rely on, the AI agents are cooked.

      大多数人认为AI将提高软件开发的效率和安全性,但作者警告说,如果我们不保护AI代理所依赖的供应链,这些代理本身就会成为攻击目标。这挑战了AI发展必然带来安全提升的主流观点,提出了一个反直觉的警告。

  3. Apr 2025
  4. Dec 2024
  5. May 2024
    1. the whole world is affected by it opium ferret from Afghan Fields produces nearly all of the heroines sold in Europe how will prices be impacted

      for - question - how will the Taliban's successful destruction of the poppy industry affect drug supplies in Europe?

      to - youtube - Vice - The new fentanyl killing drug users in Europe - https://hyp.is/MDez0BYcEe-rq0sJ-I6FRg/docdrop.org/video/JqqfI-bIvnI/

  6. Apr 2024
    1. Die EU hat nicht erreicht, dass Mittel aus dem Inflation Reduction Act auch zur Subventionierung des Kaufs von aus der EU gelieferten privaten E-Autos verwendet werden. Bei der Entscheidung der USA, die in der EU-Wirtschaft vielfach als protektionistisch bewertet wird, spielt die Herkunft von Mineralien eine große Rolle. Die Verhandlungen über das Critical Minerals Agreement (CMA) führten nicht zu einer Einigung. Der Handelsblatt-Artikel stellt den komplexen Hintergrund ausführlich dar und berichtet auch über weitere Verhandlungen.

      https://www.handelsblatt.com/politik/international/ira-deutsche-autobauer-gehen-amerikanischen-milliarden-subventionen-leer-aus/100030133.html

  7. Oct 2023
  8. Jul 2023
  9. Jun 2023
  10. Jan 2023
    1. Ziemkiewicz has a picture in his office of himself and Senator Joe Manchin, who has expressed support of his program. “Recycling provides a tremendous opportunity to avoid outsourcing the raw supply of critical minerals we need while creating new economic opportunities right here at home,” Manchin said, at a congressional hearing in the spring. Ziemkiewicz keeps his politics to himself. In the past, he has called himself “a Trotskyite,” but he believes that the success of his past three decades of work, reclaiming thousands of miles of rivers and streams in Appalachia, is based on sharing knowledge across a wide array of communities

      Wow, he got Manchin on board?

  11. Dec 2022
  12. Aug 2022
  13. Jun 2022
  14. Feb 2022
  15. Jan 2022
  16. notesfromasmallpress.substack.com notesfromasmallpress.substack.com
    1. If booksellers like to blame publishers for books not being available, publishers like to blame printers for being backed up. Who do printers blame? The paper mill, of course.

      The problem with capitalism is that in times of fecundity things can seem to magically work so incredibly well because so much of the system is hidden, yet when problems arise so much becomes much more obvious.

      Unseen during fecundity is the amount of waste and damage done to our environments and places we live. Unseen are the interconnections and the reliances we make on our environment and each other.

      There is certainly a longer essay hiding in this idea.

  17. Sep 2021
  18. Aug 2021
  19. May 2021
    1. blockchain-based system

      I see the point that blockchain helps make provenance tracing possible, but will need more details of how blockchain technology is leveraged here. Otherwise, I still feel stuck by questions like "Why it has to be blockchain?" and "Can't other technologies serve the same function?".

  20. Mar 2021
  21. Jan 2021
  22. Nov 2020
    1. According to the World Economic Forum’s Global Risks Report 2020, the interconnectedness of our global business supply chains has made the world more vulnerable to societal and economic disruption from local infectious-disease outbreaks.
  23. Aug 2020
  24. Jul 2020
  25. Jun 2020
  26. May 2020
  27. Apr 2020
    1. Newton, P. N., Bond, K. C., Adeyeye, M., Antignac, M., Ashenef, A., Awab, G. R., Babar, Z.-U.-D., Bannenberg, W. J., Bond, K. C., Bower, J., Breman, J., Brock, A., Caillet, C., Coyne, P., Day, N., Deats, M., Douidy, K., Doyle, K., Dujardin, C., … Zaman, M. (2020). COVID-19 and risks to the supply and quality of tests, drugs, and vaccines. The Lancet Global Health, S2214109X20301364. https://doi.org/10.1016/S2214-109X(20)30136-4

  28. Nov 2019
  29. Jun 2019