HNHacker News
TopNewBestAskShowJobs

feross

48,015 karma · joined September 1, 2009

Founder & CEO, Socket <https://socket.dev> – Socket makes a developer-first security platform that prevents vulnerable and malicious open source dependencies from infiltrating your software supply chain.

Stanford visiting lecturer, CS 253 Web Security <https://cs253.stanford.edu> – Principles of web security, attacks and countermeasures, and more...

Open source maintainer – 100+ open source packages on npm, including WebTorrent <https://webtorrent.io>, StandardJS <https://standardjs.com>, BitMidi <https://bitmidi.com>, simple-peer <https://github.com/feross/simple-peer>, and more <https://socket.dev/npm/user/feross>.

You can reach me at {my username}@feross.org, or find out more on my website: https://feross.org/resume

[ my public key: https://keybase.io/feross; my proof: https://keybase.io/feross/sigs/gO6pVIJ1DXdy9Y21yil6nlyk_by5BE_GaaWOOQJ5PvQ ]

submissionscomments

Charlie Munger and the Psychology of Human Misjudgement

fs.blog·2 pts·feross·
0

Malicious Chrome Extension Exfiltrates Seed Phrases, Enabling Wallet Takeover

socket.dev·2 pts·feross·
0

Release Notes for Safari Technology Preview 232

webkit.org·2 pts·feross·
0

Socket at Black Hat Europe and BSides London 2025

socket.dev·3 pts·feross·
0

2025.45: Frothiness and the Future

stratechery.com·1 pts·feross·
1

Elon Wants His Votes

bloomberg.com·2 pts·feross·
0

An Interview with Michael Morton About AI E-Commerce

stratechery.com·1 pts·feross·
1

In What Sense Is Life Suffering?

astralcodexten.com·2 pts·feross·
2

Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads

socket.dev·3 pts·feross·
0

PolyForm Noncommercial 2.0.0-Pre.2

writing.kemitchell.com·5 pts·feross·
0

How Enterprise Security Is Adapting to AI-Accelerated Threats

socket.dev·2 pts·feross·
0

PolyForm Noncommercial 2.0.0-Pre.1

writing.kemitchell.com·3 pts·feross·
0

The Changelog Podcast: Practical Steps to Stay Safe on NPM

socket.dev·2 pts·feross·
0

Ruby Core Team Assumes Stewardship of RubyGems and Bundler, Former Maintainers

socket.dev·3 pts·feross·
1

Aisuru botnet shifts from DDoS to residential proxies

krebsonsecurity.com·59 pts·feross·
60

High Agency Matters

addyosmani.com·1 pts·feross·
0

All Public Companies Are Alike

bloomberg.com·3 pts·feross·
3

Springs and bounces in native CSS

joshwcomeau.com·273 pts·feross·
41

NPM Typosquatted Packages Deploy Multi-Stage Credential Harvester

socket.dev·3 pts·feross·
0

Socket Firewall Enterprise: Flexible, Configurable Protection For

socket.dev·3 pts·feross·
0

2025.43: The Cost of Resiliency

stratechery.com·2 pts·feross·
0

Highlights from the Comments on Fatima

astralcodexten.com·1 pts·feross·
0

New CNAPulse Dashboard Tracks CNA Activity and Disclosure Trends

socket.dev·2 pts·feross·
0

Netflix Earnings, KPop Demon Hunters and Netflix Hit Production

stratechery.com·3 pts·feross·
0

Expanding Model Choice in VS Code with Bring Your Own Key

code.visualstudio.com·1 pts·feross·
0

GitHub Actions Scanning Support

socket.dev·2 pts·feross·
0

Unify Your Security Stack with Socket Basics

socket.dev·1 pts·feross·
0

From Curl Commands to Type-Safe API Clients: A Complete Workflow

blog.platformatic.dev·2 pts·feross·
0

Walmart on ChatGPT, Walmart (and Amazon) Motivations, Spotify Podcasts On

stratechery.com·1 pts·feross·
0

Jim Clayton

fs.blog·1 pts·feross·
0
← PreviousPage 4 of 34Next →