HNHacker News
TopNewBestAskShowJobs

feross

48,015 karma · joined September 1, 2009

Founder & CEO, Socket <https://socket.dev> – Socket makes a developer-first security platform that prevents vulnerable and malicious open source dependencies from infiltrating your software supply chain.

Stanford visiting lecturer, CS 253 Web Security <https://cs253.stanford.edu> – Principles of web security, attacks and countermeasures, and more...

Open source maintainer – 100+ open source packages on npm, including WebTorrent <https://webtorrent.io>, StandardJS <https://standardjs.com>, BitMidi <https://bitmidi.com>, simple-peer <https://github.com/feross/simple-peer>, and more <https://socket.dev/npm/user/feross>.

You can reach me at {my username}@feross.org, or find out more on my website: https://feross.org/resume

[ my public key: https://keybase.io/feross; my proof: https://keybase.io/feross/sigs/gO6pVIJ1DXdy9Y21yil6nlyk_by5BE_GaaWOOQJ5PvQ ]

submissionscomments

Malicious Chrome Extension Steals MEXC API Keys for Account Takeover

socket.dev·7 pts·feross·
0

Tailwind CSS Announces 75% Layoffs as LLMs Reshape OSS Business Models

socket.dev·3 pts·feross·
1

The AI will vote the shares

bloomberg.com·2 pts·feross·
1

NPM to implement staged publishing after turbulent shift off classic tokens

socket.dev·205 pts·feross·
125

Predict your house price

bloomberg.com·11 pts·feross·
6

Nvidia at CES, Vera Rubin and AI-Native Storage Infrastructure, Alpamayo

stratechery.com·2 pts·feross·
0

Nvidia and Groq, a Stinkily Brilliant Deal, Why This Deal Makes Sense

stratechery.com·1 pts·feross·
1

James Clear: How to Build Good Habits and Break Bad Ones

fs.blog·5 pts·feross·
0

Learn Phrygian in Zero Days

astralcodexten.com·2 pts·feross·
0

Happy 16th Birthday, Krebsonsecurity.com

krebsonsecurity.com·4 pts·feross·
0

The Outlier Playbook: The Patterns Behind Enduring Success

fs.blog·5 pts·feross·
0

Winter Break: December 22nd to January 2nd

stratechery.com·1 pts·feross·
0

Malicious Chrome Extensions "Phantom Shuttle" Masquerade as a VPN to Intercept

socket.dev·1 pts·feross·
0

Trump Media Discovers Nuclear Fusion

bloomberg.com·8 pts·feross·
1

Be Your Best in 2026: The Most Important Lessons from the Knowledge Project

fs.blog·1 pts·feross·
0

The Pledge

astralcodexten.com·3 pts·feross·
1

The Supply Chain Nightmare Before Deployment

socket.dev·2 pts·feross·
1

Fake Trading Is Hard Work

bloomberg.com·1 pts·feross·
1

Watt-Admin 1.0.0: Capture, Profile, and Share Your Node.js Performance Data

blog.platformatic.dev·1 pts·feross·
0

An Interview with Rivian CEO RJ Scaringe About Building a Car Company and

stratechery.com·1 pts·feross·
0

The Video of Dumb Investment

bloomberg.com·2 pts·feross·
0

Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet

socket.dev·3 pts·feross·
0

Disney and OpenAI, Totems in an AI World, Google versus the World

stratechery.com·2 pts·feross·
0

Deno 2.6 and Socket: Supply Chain Defense in Your CLI

socket.dev·3 pts·feross·
0

Blocking Software Supply Chain Attacks

softwareengineeringdaily.com·1 pts·feross·
0

Software Engineering Daily Podcast: Feross on AI, Open Source, and Supply Chain

socket.dev·1 pts·feross·
0

The Warner Deal Will Take a While

bloomberg.com·4 pts·feross·
1

Links for December 2025

astralcodexten.com·1 pts·feross·
0

NPM Revokes Classic Tokens, as OpenJS Warns Maintainers About OIDC Gaps

socket.dev·3 pts·feross·
1

Common Threads

pudding.cool·2 pts·feross·
0
← PreviousPage 2 of 34Next →