HNHacker News
TopNewBestAskShowJobs

feross

48,015 karma · joined September 1, 2009

Founder & CEO, Socket <https://socket.dev> – Socket makes a developer-first security platform that prevents vulnerable and malicious open source dependencies from infiltrating your software supply chain.

Stanford visiting lecturer, CS 253 Web Security <https://cs253.stanford.edu> – Principles of web security, attacks and countermeasures, and more...

Open source maintainer – 100+ open source packages on npm, including WebTorrent <https://webtorrent.io>, StandardJS <https://standardjs.com>, BitMidi <https://bitmidi.com>, simple-peer <https://github.com/feross/simple-peer>, and more <https://socket.dev/npm/user/feross>.

You can reach me at {my username}@feross.org, or find out more on my website: https://feross.org/resume

[ my public key: https://keybase.io/feross; my proof: https://keybase.io/feross/sigs/gO6pVIJ1DXdy9Y21yil6nlyk_by5BE_GaaWOOQJ5PvQ ]

submissionscomments

Rust RFC Proposes a Security Tab on Crates.io for RustSec Advisories

socket.dev·2 pts·feross·
0

Release Notes for Safari Technology Preview 233

webkit.org·2 pts·feross·
0

A Bidding War for Warner Bros

bloomberg.com·3 pts·feross·
2

LLMs Make Legal Advice Lossy

writing.kemitchell.com·5 pts·feross·
0

2025.49: Conflicts, Consternation, and Code Red

stratechery.com·1 pts·feross·
0

Malicious Crate Mimicking 'Finch' Exfiltrates Credentials via a Hidden

socket.dev·2 pts·feross·
0

Malicious Go Packages Impersonate Google's UUID Library and Exfiltrate Data

socket.dev·7 pts·feross·
0

November CVEs Fell 25% YoY, Driven by Slowdowns at Major CNAs

socket.dev·2 pts·feross·
0

Target-text: An easy way to style text fragments

webkit.org·2 pts·feross·
0

Buy Low, Sell to Yourself

bloomberg.com·4 pts·feross·
1

Vibecession: More Than You Wanted to Know

astralcodexten.com·3 pts·feross·
0

An Interview with Atlassian CEO Mike Cannon-Brookes About Atlassian and AI

stratechery.com·1 pts·feross·
0

How to Think Like a World-Class Marketer – Rory Sutherland

fs.blog·1 pts·feross·
0

Critical Security Vulnerability in React Server Components

socket.dev·4 pts·feross·
0

Scaling Socket from Zero to 10k Organizations

socket.dev·2 pts·feross·
0

OpenAI Will Own Some Users

bloomberg.com·3 pts·feross·
1

The GitHub Infrastructure Powering North Korea's Contagious Interview NPM

socket.dev·2 pts·feross·
0

November 2025 Insiders (version 1.107)

code.visualstudio.com·1 pts·feross·
0

Leave the Gold in the Ground

bloomberg.com·2 pts·feross·
3

2025.47: Gemini at the Disco

stratechery.com·2 pts·feross·
0

Webhook Events for Alert Changes

socket.dev·2 pts·feross·
0

Gemini 3, Winners and Losers, Integration and the Enterprise

stratechery.com·1 pts·feross·
0

Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies

socket.dev·2 pts·feross·
0

Watt v3.18 Unlocks Next.js 16's Revolutionary 'use cache' Directive with

blog.platformatic.dev·1 pts·feross·
0

God Help Us, Let's Try to Have an Opinion on the War in Gaza

astralcodexten.com·4 pts·feross·
3

Robotaxis and Suburbia

stratechery.com·2 pts·feross·
1

Another Round of Tea Protocol Spam Floods NPM, but It's Not a Worm

socket.dev·1 pts·feross·
0

2025.46: Satellites and Strategy

stratechery.com·2 pts·feross·
0

Suggest Questions for Metaculus/ACX Forecasting Contest

astralcodexten.com·1 pts·feross·
0

An Interview with Unity CEO Matthew Bromberg About Turnarounds

stratechery.com·37 pts·feross·
38
← PreviousPage 3 of 34Next →