Allow myself to introduce... myself.
- Jerod Santo
We need to talk.
Supply chain attacks are going parabolic in both frequency and impact. There are so many hacks now that we gussy ‘em up with names like GemStuffer, SANDWORM_MODE, and TrapDoor just to keep track of the onslaught.
(Remember Heartbleed? The O.G. (Original Gussy))
We’ve also got frontier models escaping their sandboxes to hack third parties, zero-click worms spreading through WeChat without any user interaction, AI-discovered zero days being used by criminal enterprises, and so many more I’d lose you by listing them all.
But it’s not all doom and gloom.
The same tools that discover and exploit unknown vulnerabilities in open source codebases are being used to find and fix critical software, too.
It’s that age ol’ game of security cat and mouse, turned up to 11.
For the security conscious software developer, these are the best of times and the worst of times, bundled together right there in your package.json
It is on to that backdrop that I’m happy to introduce myself as Socket’s new Head of Media!
Hi, I’m Jerod Santo: long-time developer, open source maintainer, podcaster, and writer. I’ve believed in Socket’s mission since day one and even invested in Feross and this team in the early days. I’m joining Socket in this crazy moment because the stakes have never been higher and security concerns are becoming top of mind for all organizations everywhere.
(There are other reasons, too! Read more on my blog)
I believe that what the software world needs now is l̶o̶v̶e̶,̶ ̶s̶w̶e̶e̶t̶ ̶l̶o̶v̶e̶ more conversations about what’s happening in supply chain security, how it affects our work/lives, what we can do about it, and where things are headed.
Not just the news, but the nuance behind it, beyond the hot takes that flare up and fizzle out on social media. Thoughtful opinions from people who really know their stuff.
We’ll have more detail to announce soon! Intrigued? Join me on this journey by subscribing to the Socket newsletter below.