Like

Liked Ryan Castellucci :nonbinary_flag: (@ryanc@infosec.exchange)
Post details
It's been ten years, so a short story about the "gotofail" bug. Someone came to me about a catastrophic vulnerability in Apple's TLS implementation. I shit you not, they'd overheard someone at a bar drunkenly bragging about how they were going to sell it to a FVEY intelligence agency for six figures. They didn't know exactly what it was, just some vague details and the key point that it allowed use of the real certificate. This was enough for me to find the bug (yay open source), which would go on to be known as "gotofail", and produce a working exploit in less than a day. The details were anonymously back channelled to Apple, who released a fix. @matthew_d_green@ioc.exchange posted on Twitter about it, concerned by Apple's vague release notes. I used a burner phone to share the details with him anonymously. Then everyone forgot about the whole thing because heartbleed. ¯\\\_(ツ)\_/¯

 Reply

Have you seen the newly launched Commonhaus? 👀

 Like

Liked Josh Simmons (@josh@josh.tel)
Post details
As much as I don't think every single project or ecosystem needs its own dedicated FOSS foundation... I would much rather that than have a massive swath of the FOSS commons under the auspices of a single organization. I've not been shy about my views that the Linux Foundation has become a dangerous single point of failure. #OpenSource #FreeSoftware #Governance

 Like

Liked Alex Wilson :balatro_joker: (@probablyfine@tech.lgbt)
Post details
One of the most useful things I've learned about writing software is knowing when to say "Nah, this is bad", reset or stash my change, and start again. Nothing you write is providing value until it's landed in main, and even that's not a guarantee. Be more comfortable with throwing away your work if it's not right, and work in small increments so you're less attached to your solutions.

 Listen

Listened to The Business of Open Source | Taking a hard look at what community means and if every OSS company needs one with Deepak Prabhakara
Post details
This week on The Business of Open Source, I spoke with BoxyHQ co-founder and CEO Deepak Prabhakara. We talked about a number of things, from BoxyHQ’s relationship with its open source project, called SAML Jackson to how to build a growth flywheel and how that flywheel does and does not depend on...

 Like

Liked Tailscale (@tailscale@hachyderm.io)
Post details
We don't like the "SSO tax," where vendors treat a basic security feature like a luxury to charge users for. And yet, we found a whiff of it in our own pricing! So we fixed it: https://tailscale.com/blog/sso-tax-cut/?utm_source=Mastodon&utm_medium=owned-social&utm_campaign=devrel-social

 Repost

Reposted Nick @ The Linux Experiment (@thelinuxEXP@mastodon.social)
Post details
Did MKBHD ruin an AI company and their product because of their negative review of it? No, the bad AI product ruined itself and its company. Just because someone created a business, found funding and created a thing doesn’t mean they should get instant recognition, and a pass for crappy stuff. Entrepreneurs aren’t your friends, they aren’t superior, they don’t deserve to be coddled. When they make sh*t products, they should be told that they made sh*t. MKBHD did their job.

 Listen

Listened to Adam Jacob, System Initiative | IT Ops Query by PodBean Development 
Post details
Adam Jacob is CEO and co-founder of System Initiative, an infrastructure automation software startup that came out of stealth in 2023. Previously, he was co-founder and CTO of Chef Software, which also focused on infrastructure automation, and was sold to Progress Software in 2020. Chef had roots in open source, and underwent a license change in 2019; Jacob has taken a different tack with his new company. In this episode, he discusses his "speed run" through the various permutations of open source business models during his career, and how the industry can use the lessons learned by a generation of open product entrepreneurs to improve open source-based business sustainability.

 Listen

Listened to How to Have a Massage | Nobody Panic
Post details
Listen to How to Have a Massage from Nobody Panic. Stevie got a massage and loved it. Tessa gets them all the time for her stressed body. Together they offer advice if you’re thinking about going for the first time and, quite frankly, get far too worried about how to tell if your masseuse is going to give you a “happy ending” or not. Subscribe to the Nobody Panic Patreon at patreon.com/nobodypanicWant to support Nobody Panic? You can make a one-off donation at https://supporter.acast.com/nobodypanicRecorded and edited by Aniya Das for Plosive.Photos by Marco Vittur, jingle by David Dobson.