's Avatar

@nscur0

πŸ‡ͺπŸ‡Ί / πŸ‡©πŸ‡ͺ AppSec enthusiast, plant muncher 🌱. Co-Lead of @dependencytrack.bsky.social. Maintainer of @cyclonedx.bsky.social Go tooling.

115
Followers
107
Following
15
Posts
23.10.2024
Joined
Posts Following

Latest posts by @nscur0

Book cover of "Designing Data-Intensive Applications, 2nd edition". It has a similar wild boar on the cover as the first edition, but it uses O'Reilly's new cover design, and the boar is now slightly colourised.

Book cover of "Designing Data-Intensive Applications, 2nd edition". It has a similar wild boar on the cover as the first edition, but it uses O'Reilly's new cover design, and the boar is now slightly colourised.

The second edition of Designing Data-Intensive Applications, by myself and @chris.blue, is finished and sent off to the printers! Ebooks should be available in the next week, and print books in 3–4 weeks. Sigh of relief. πŸ˜…

(BTW, this is a good opportunity to support your favourite local bookshop!)

18.02.2026 11:09 πŸ‘ 670 πŸ” 140 πŸ’¬ 27 πŸ“Œ 19

Godot's GitHub has increasingly many pull requests generated by LLMs and it's a MASSIVE time waster for reviewers – especially if people don't disclose it. Changes often make no sense, descriptions are extremely verbose, users don't understand their own changes… It's a total shitshow. #godotengine

16.02.2026 09:03 πŸ‘ 1393 πŸ” 312 πŸ’¬ 31 πŸ“Œ 36

Honestly, AI slop PRs are becoming increasingly draining and demoralizing for #Godot maintainers.

If you want to help, more funding so we can pay more maintainers to deal with the slop (on top of everything we do already) is the only viable solution I can think of:

fund.godotengine.org

16.02.2026 15:33 πŸ‘ 1985 πŸ” 886 πŸ’¬ 53 πŸ“Œ 45
transcript from a new york times interview with trump about greenland:
David E. Sanger

We had, in Greenland β€”

President Trump

Oh good, because you needed them at the time.

David E. Sanger

β€” we had START. In the 1951 agreement, though, it says the United States can reopen these bases anytime you want. You can send as many troops as you want.

President Trump

That’s right.

David E. Sanger

And you haven’t done it. How come?

transcript from a new york times interview with trump about greenland: David E. Sanger We had, in Greenland β€” President Trump Oh good, because you needed them at the time. David E. Sanger β€” we had START. In the 1951 agreement, though, it says the United States can reopen these bases anytime you want. You can send as many troops as you want. President Trump That’s right. David E. Sanger And you haven’t done it. How come?

President Trump

Because I want to do it properly.

David E. Sanger

And properly means own it?

President Trump

Really it is, to me, it’s ownership. Ownership is very important.

David E. Sanger

Why is ownership important here?

President Trump

Because that’s what I feel is psychologically needed for success. I think that ownership gives you a thing that you can’t do, whether you’re talking about a lease or a treaty. Ownership gives you things and elements that you can’t get from just signing a document, that you can have a base.

President Trump Because I want to do it properly. David E. Sanger And properly means own it? President Trump Really it is, to me, it’s ownership. Ownership is very important. David E. Sanger Why is ownership important here? President Trump Because that’s what I feel is psychologically needed for success. I think that ownership gives you a thing that you can’t do, whether you’re talking about a lease or a treaty. Ownership gives you things and elements that you can’t get from just signing a document, that you can have a base.

David E. Sanger

So you’re going to ask them to buy it?

Katie Rogers

Psychologically important to you or to the United States?

President Trump

Psychologically important for me. Now, maybe another president would feel differently, but so far I’ve been right about everything.

Tyler Pager

And you would use military force to get that?

President Trump

I didn’t say that. You said that.

Tyler Pager

I’m asking you. Would you?

President Trump

Yeah, I wouldn’t comment on that. I don’t think it’ll be necessary.

David E. Sanger So you’re going to ask them to buy it? Katie Rogers Psychologically important to you or to the United States? President Trump Psychologically important for me. Now, maybe another president would feel differently, but so far I’ve been right about everything. Tyler Pager And you would use military force to get that? President Trump I didn’t say that. You said that. Tyler Pager I’m asking you. Would you? President Trump Yeah, I wouldn’t comment on that. I don’t think it’ll be necessary.

US politics is so stupid right now it's insane

trump doesn't want greenland for national security reasons

he wants greenland because he wants greenland

18.01.2026 16:44 πŸ‘ 239 πŸ” 11 πŸ’¬ 7 πŸ“Œ 1
Preview
European Alternatives We help you find European alternatives for digital service and products, like cloud services and SaaS products.

It will take time (especially as an Apple user) make the technology and other products I own as independent from and non-reliant on American products as possible, but I'm finally getting started trying to do so. Recent events have been an impetus. This website is helpful: european-alternatives.eu

18.01.2026 13:41 πŸ‘ 69 πŸ” 19 πŸ’¬ 7 πŸ“Œ 1

Es gibt auf der anderen Seite des Atlantiks nichts mehr zu gewinnen und auf unserer Seite alles zu verlieren.

17.01.2026 21:15 πŸ‘ 923 πŸ” 259 πŸ’¬ 35 πŸ“Œ 10
17.01.2026 20:40 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Video thumbnail

President Emmanuel Macron:

β€œWhere Ukraine was eminently dependent on American intelligence capabilities by an overwhelming majority a year ago, today two-thirds are provided by France. Two-thirds.”

15.01.2026 15:26 πŸ‘ 5681 πŸ” 1278 πŸ’¬ 207 πŸ“Œ 91
Zwei Fliegen schweben vor einem Kiosk, vor dem ein Schild steht mit der Aufschrift "Hier gibt's BILD". Linke Fliege (sieht das Schild nicht): "Komisch. Ich rieche die Scheiße, aber ich sehe sie nicht."

Zwei Fliegen schweben vor einem Kiosk, vor dem ein Schild steht mit der Aufschrift "Hier gibt's BILD". Linke Fliege (sieht das Schild nicht): "Komisch. Ich rieche die Scheiße, aber ich sehe sie nicht."

Die BILD fordert den RΓΌcktritt von CDU-Politiker Daniel GΓΌnther, weil dieser sich gegen Fake-News ausspricht. πŸ™ƒ

12.01.2026 07:47 πŸ‘ 2006 πŸ” 537 πŸ’¬ 48 πŸ“Œ 22
Preview
GitHub - DependencyTrack/community: Community resources for OWASP Dependency-Track | OWASP Dependency-Track Join us tomorrow, November 5th, for the monthly Dependency-Track community meeting! Outside of the usual project updates, we're happy to host a guest presentation by Viktor Petersson, creator of sbom...

Community meeting tomorrow at 5PM UTC! www.linkedin.com/posts/owasp-...

04.11.2025 11:28 πŸ‘ 0 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0
Preview
CycloneDX SBOM Spec (OWASP) on X: "CycloneDX v1.7 is here! The latest release strengthens software & system transparency with: - Cryptography BOM (CBOM) - Data provenance & citations - Intellectual property visibility Learn more: https://t.co/VjHCDgC5tL #OWASP #CycloneDX #SBOM #CBOM #CyberSecurity" / X CycloneDX v1.7 is here! The latest release strengthens software & system transparency with: - Cryptography BOM (CBOM) - Data provenance & citations - Intellectual property visibility Learn more: https://t.co/VjHCDgC5tL #OWASP #CycloneDX #SBOM #CBOM #CyberSecurity

CycloneDX v1.7 is here!

The latest release strengthens software & system transparency with:
- Cryptography BOM (CBOM)
- Data provenance & citations
- Intellectual property visibility

Learn more: cyclonedx.org/news/cyclone...

#OWASP #SBOM #CBOM #CyberSecurity

21.10.2025 15:40 πŸ‘ 8 πŸ” 6 πŸ’¬ 1 πŸ“Œ 0
Java 25 / JDK 25: General Availability

Java 25 / JDK 25: General Availability: mail.openjdk.org/pipermail/jd...

Features: openjdk.org/projects/jdk...

Downloads: jdk.java.net/25/

#Java25 #JDK25 #OpenJDK #Java

16.09.2025 13:26 πŸ‘ 81 πŸ” 52 πŸ’¬ 0 πŸ“Œ 3
A failed code coverage check showing 69.88%, with the target percentage for a passing check being 70%.

A failed code coverage check showing 69.88%, with the target percentage for a passing check being 70%.

omfg

13.09.2025 10:53 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
Open Source is one person The Register recently published a story titled Putin on the code: DoD reportedly relies on utility written by Russian dev. They should be ashamed of this story, and the company behind the ambulance ch...

The Register wrote a story about a single maintainer open source project, I think it's shameful and upsetting

So I wrote a blog post about it

An absolutely ridiculous amount of open source is one person projects. I have the data to prove it

opensourcesecurity.io/2025/08-oss-...

28.08.2025 01:41 πŸ‘ 58 πŸ” 27 πŸ’¬ 6 πŸ“Œ 0
Post image
30.07.2025 17:58 πŸ‘ 1012 πŸ” 199 πŸ’¬ 6 πŸ“Œ 4

Absolute brilliance.

30.07.2025 18:04 πŸ‘ 48 πŸ” 5 πŸ’¬ 1 πŸ“Œ 0
Tech Promised Everything. Did it deliver? | Scott Hanselman | TEDxPortland
Tech Promised Everything. Did it deliver? | Scott Hanselman | TEDxPortland YouTube video by TEDx Talks

I just wanted to say, I’m probably more proud of this Ted talk than just about anything I’ve ever done so I’m gonna be absolutely useless for the next couple of weeks as I promote the shit out of this because I want you to watch it because it matters in the moment we are in youtu.be/dVG8W-0p6vg

17.07.2025 20:37 πŸ‘ 991 πŸ” 273 πŸ’¬ 79 πŸ“Œ 93
Preview
Silicon Valley AI Startups Are Embracing China’s Controversial β€˜996’ Work Schedule In an industry once known for cushy perks, some founders are now asking staff to commit to a 72-hour weekly schedule. You’re either in or you’re out.

My friends. This is not a good idea: www.wired.com/story/silico... - take it from every single wisdom tradition in the history of the world. You can love your work, but your work cannot love you back. Have more respect for yourself and your peers. Work hard. Do good work.

23.07.2025 16:18 πŸ‘ 31 πŸ” 6 πŸ’¬ 3 πŸ“Œ 4

I guess that's mostly explained by generator templates being crowdsourced. There is no single person out there who can produce idiomatic templates for all of them. On the positive side, making improvements is just a custom template, and ideally PR, away.

12.06.2025 18:54 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
GitHub - OpenAPITools/openapi-generator: OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec... OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec (v2, v3) - OpenAPITools/openapi-gener...

github.com/OpenAPITools... has worked well enough in my experience. Caters not only to various ecosystems but also different libraries and frameworks within those ecosystems.

11.06.2025 14:36 πŸ‘ 1 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0
Tweet von Friedrich Merz mit einem Bild seinem Eid als Bundeskanzler mit der Überschrift: β€žSo wahr mir Gott helfe.β€œ 

Antwort von Ricarda: β€žOder die GrΓΌnen. Oder die Linken.β€œ

Tweet von Friedrich Merz mit einem Bild seinem Eid als Bundeskanzler mit der Überschrift: β€žSo wahr mir Gott helfe.β€œ Antwort von Ricarda: β€žOder die GrΓΌnen. Oder die Linken.β€œ

08.05.2025 06:03 πŸ‘ 7129 πŸ” 1228 πŸ’¬ 232 πŸ“Œ 79
Post image

BREAKING.

From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.

15.04.2025 17:23 πŸ‘ 679 πŸ” 414 πŸ’¬ 36 πŸ“Œ 201
How to Pronounce VW in German (VOLKSWAGEN)
How to Pronounce VW in German (VOLKSWAGEN) YouTube video by Julien Miquel

Only good video of German pronounciation I could find haha youtu.be/AD3x3rdFfgM

14.04.2025 14:47 πŸ‘ 2 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0

Am German. No one I know spells the brand name out in casual conversations, it's always just VW.

14.04.2025 14:41 πŸ‘ 1 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0
Preview
a man is holding a white pillow in his mouth ALT: a man is holding a white pillow in his mouth

So freaking tired of debugging ORM quirks. Excuse me while I scream into a pillow or something.

10.04.2025 22:20 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
a cartoon of homer simpson talking to a man standing next to a pile of money on fire . ALT: a cartoon of homer simpson talking to a man standing next to a pile of money on fire .

Happy stock portfolio downhill race day to all who celebrate!

07.04.2025 10:22 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

On the bright side, at least Brexit is no longer the stupidest and most pointless act of economic self-harm of the century

05.04.2025 20:50 πŸ‘ 2728 πŸ” 472 πŸ’¬ 113 πŸ“Œ 26
Post image

Everyone have the weekend you voted for! Globally, honestly.

05.04.2025 05:22 πŸ‘ 406 πŸ” 39 πŸ’¬ 9 πŸ“Œ 0

my new theory is that once you have a certain amount of money and wealth you start to go crazy and detach from reality. that number is different for everyone. for me it's $20

02.04.2025 16:38 πŸ‘ 35939 πŸ” 4843 πŸ’¬ 624 πŸ“Œ 188
LinkedIn This link will take you to a page that’s not on LinkedIn

Join our community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at #Monzo Bank!

Learn how Monzo replaced a proprietary vulnerability scanner with @cyclonedx.bsky.social #SBOMs & Dependency-Track.

Calendar Invite: dub.sh/dtcalendar
Zoom Link: dub.sh/dtzoom

27.03.2025 19:28 πŸ‘ 4 πŸ” 4 πŸ’¬ 0 πŸ“Œ 0