Feross's banner

Feross

@feross • 41,254 subscribers

⚡️ Founder + CEO @SocketSecurity (https://t.co/7g1opA7Tr8) • 🌲 Visiting lecturer @Stanford (https://t.co/yw9prxLiLe) • ❤️ Open source @WebTorrentApp + @StandardJS

Shorts

🎉 Socket is proud to be named to the Rising in Cyber 2026 list by Notable Capital, recognizing 30 private cybersecurity startups selected by nearly 150 practicing CISOs and cybersecurity executives.

🎉 Socket is proud to be named to the Rising in Cyber 2026 list by Notable Capital, recognizing 30 private cybersecurity startups selected by nearly 150 practicing CISOs and cybersecurity executives.

454,306 Aufrufe

💪 Socket just raised a $60M Series C at a $1B valuation, led by Thrive Capital. Apparently that's worth a gong. 🔔

💪 Socket just raised a $60M Series C at a $1B valuation, led by Thrive Capital. Apparently that's worth a gong. 🔔

200,761 Aufrufe

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

I'm an engineer. I used to think sales was dirty. Cold calls, pushy tactics, all of it. The product should speak for itself. Running Socket changed my mind. I actually like sales now. Done well, sales is consultative. You help people understand a problem that matters, you're honest about where your product is strong and where it isn't, and you optimize for fit. That's not in tension with the engineering mindset. It's an extension of it. There are two ways to die as a company. Build a technically excellent product that nobody cares about. Or put sales in charge, underinvest in engineering, grow fast, and hit a ceiling when customers realize the product hasn't improved in five years. We've watched competitors do the second. The job is to keep engineering and sales both strong, and never let one dominate the other. I joined Anne Dwane on the Village Global podcast to talk about this, plus where Socket is today and why open source supply chain risk keeps getting worse. Full episode in the comments.

I'm an engineer. I used to think sales was dirty. Cold calls, pushy tactics, all of it. The product should speak for itself. Running Socket changed my mind. I actually like sales now. Done well, sales is consultative. You help people understand a problem that matters, you're honest about where your product is strong and where it isn't, and you optimize for fit. That's not in tension with the engineering mindset. It's an extension of it. There are two ways to die as a company. Build a technically excellent product that nobody cares about. Or put sales in charge, underinvest in engineering, grow fast, and hit a ceiling when customers realize the product hasn't improved in five years. We've watched competitors do the second. The job is to keep engineering and sales both strong, and never let one dominate the other. I joined Anne Dwane on the Village Global podcast to talk about this, plus where Socket is today and why open source supply chain risk keeps getting worse. Full episode in the comments.

13,206 Aufrufe • vor 15 Tagen

The `xz` package backdoor is just the tip of the iceberg. There's a CONSTANT low-level stream of malware and spyware being uploaded to npm, PyPI, and Go registries. I want to share a few examples from the 20,000+ malicious packages we detected so far:

The `xz` package backdoor is just the tip of the iceberg. There's a CONSTANT low-level stream of malware and spyware being uploaded to npm, PyPI, and Go registries. I want to share a few examples from the 20,000+ malicious packages we detected so far:

302,963 Aufrufe • vor 2 Jahren

💥 Your AI coding assistant might be stealing your SSH keys. 💥 Socket found an active Shai-Hulud style npm worm (SANDWORM_MODE) that hijacks CI workflows, spreads via stolen tokens, and injects rogue MCP servers to poison AI coding tools and steal secrets.

💥 Your AI coding assistant might be stealing your SSH keys. 💥 Socket found an active Shai-Hulud style npm worm (SANDWORM_MODE) that hijacks CI workflows, spreads via stolen tokens, and injects rogue MCP servers to poison AI coding tools and steal secrets.

15,164 Aufrufe • vor 5 Monaten

1/4: 🚀 Big news from Socket! We're launching a new browser extension for Chrome, Firefox, Edge, & Brave. It helps you verify the security & trustworthiness of NPM packages before you install them. ✨ 👀 Let's see how it can help you avoid terrible NPM dependencies! 🗑️

1/4: 🚀 Big news from Socket! We're launching a new browser extension for Chrome, Firefox, Edge, & Brave. It helps you verify the security & trustworthiness of NPM packages before you install them. ✨ 👀 Let's see how it can help you avoid terrible NPM dependencies! 🗑️

14,372 Aufrufe • vor 3 Jahren

Keine weiteren Inhalte verfügbar