Editing Software Engineering (Fall 2025) (section)

=== November 13 (Thursday) -- Infrastructures and Supply Chains (Part 2) ===
Note: Class will be via Zoom this day

Case: Log4J

'''Before Class'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%208?preview=141248498 Read Reading Note 13]
* Watch my mini-lecture -- [https://canvas.uw.edu/courses/1838606/files/folder/Week%208?preview=141408696 Infrastructure and Supply Chains Part 2]
* Prepare Case Material
** Read [https://github.blog/open-source/inside-the-breach-that-broke-the-internet-the-untold-story-of-log4shell/ this account of the incident] (from the GitHub blog) -- no need to watch the video, it's a bit long.
** Read the Wikipedia article on [https://en.wikipedia.org/wiki/Dependency_hell Dependency Hell]
** Read the [https://www.cisa.gov/sbom CISA webpage about SBOMs]
** Read this blog post with [https://federalnewsnetwork.com/commentary/2022/10/when-will-sboms-finally-benefit-the-federal-governments-software-supply-chain/ a forecast on SBOMs]
** Read this blog post explaining the [https://www.chainguard.dev/unchained/software-dark-matter-is-the-enemy-of-software-transparency dark matter critique of SBOMs]

'''Class Goals:'''
* Discuss Reading Note 13
* Hands-on activities
* Standup
* Hands-on / triage issues with Bot task 6

'''Class Materials:'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%208?preview=141676159 Miro board]

<!--
'''Optional Reading:'''

Dependencies?? Triage?? Bug-prone areas?? Generative AI something something? Guest Speaker?

-->

<!-- Beyond Lines of Code Ch 8 of Making Software -->