#hbom — Public Fediverse posts

Just a few days back we were discussing hbom is tricky coz once we try to read in we are going to tamper warantties and today @bunnie.org Released https://bunnie.org/iris hoping this changes the landscape
#hbom #trustbutverify

Just a few days back we were discussing hbom is tricky coz once we try to read in we are going to tamper warantties and today @bunnie.org Released https://bunnie.org/iris hoping this changes the landscape
#hbom #trustbutverify

Security (b)log: Ingredients
The label on a jar of veggies lists all (other) ingredients. We need that in IT.
#sbom #hbom #infosecurity

News from the big bad world: AI with unwanted capacities | updates sometimes backfire | have a family password | more
https://securityblogpatrick-english.blogspot.com/

Security (b)log: Ingrediënten
Op een pot groente staat wat er allemaal nog meer in zit behalve de groente. In de ICT hebben we dat ook nodig.
#sbom #hbom
GBBW: AI met ongewenste capaciteiten | update soms averechts | spreek een familiewachtwoord af | meer
https://securityblogpatrick.blogspot.com/

@allanfriedman are there standards like SPDX or CycloneDx for #HBOM ?

One very big new problem in HBOMs i see are the added complexity by product batches that can be bad. Also lots of proprietary tracking.