Twitxy Saved

Jarred Sumner

Verified account Bun

@jarredsumner

building @bunjavascript at @anthropicai. formerly: @stripe (twice) @thielfellowship. high school dropout. npm i -g bun
San Francisco, CA bun.com Joined May 2014
647 Following 199K Followers 27K Posts

Latest posts 5

Jarred Sumner Verified account @jarredsumner
assume every dependency has security vulnerabilities, including stable & fuzzed software used by millions of people daily

last couple weeks of security incidents are likely the new normal for awhile - not a crazy couple of weeks

so, making exploits more expensive is worthwhile
Jarred Sumner Verified account @jarredsumner 3d
> Won’t this lead to the same vulnerability appearing elsewhere?

Similar, yes. Same, no. And similar is a whole lot more expensive to validate and reproduce than same. The same exploit wouldn’t just work for every project using the dependency. Today, it often does.
View quoted post on X
36 replies 7 reposts 257 likes 20K views View on X