Quad Block Quiz - Supply Chain Sandbox Edition

Duncan Sparrell presents Quad Block Quiz, a browser game that mixes falling-block puzzle play with trivia about software supply chain security. Unresolved vulnerabilities and licensing problems clog the board, and too many vulnerabilities trigger attacks that drain the score. Answering questions, whose background text holds the answers, earns power-ups that clear or move blocks, each tied to a supply chain concept.

Next he argues that history matters for this problem. He traces Roman military logistics, nineteenth-century engineering, and his father's work on bridges, insurance loss prevention and early automotive crash safety. From that he argues that software bills of materials are worth creating once risk is measured quantitatively, and he outlines how standards such as CSAF, VEX, OpenC2 and CACAO could automate defense and shorten attacker dwell time.

He closes by describing the game's build in Elixir and Phoenix, its open-source MIT license and its own published SBOM. His main takeaway is that no single fix solves supply chain risk; SBOMs, automation and information sharing have to work together. In questions he discusses SBOM adoption in finance and healthcare, how deep an inventory should go, and combining build-time and post-build scanning.