Larry���s Fun Dip: Exploring SBOMs For Fun And Profit

Episode: 46Published: 2/21/2023

What���s An SBOM Anyway?

• An example calculator application only has four dependencies listed in its package.json file
• We���re looking at about 200 required modules to build K8s
• Log4shell, in particular, forced developers to evaluate hundreds or thousands of applications
• The organization that has worked to define what is included in an SBOM is the National Telecommunications and Information Administration
• The NTIA defines an SBOM at an abstract level
• There are upsides and downsides to both source-code and binary analysis and you can check out an excellent post by Andrew Hoog

Lightning Round

• Turns Out, Microsoft���s AI Was Just As Bad As Google���s
• Web3 Continues to Go Great
• Just a reminder that it���s not just Twitter. Elon Musk is still failing at running Tesla, too
• But Also Elon Musk Is Terrible With Twitter Too
• The February updates to Windows Server 2022 ��� Break Windows Server 2022
• Amazon Employees Tasked with Mandatory Fun
  • Clearly Jassy is concerned about the slowing growth of Amazon in 2022, where they eked out a slim 9.4% increase over the previous year

Intro and outro music by James Bellavance copyright 2022