Listen

Listened to Open Source Security Podcast: Episode 439 - Where are all the youth in open source?
Post details
and talk about a story talking about the "graying" of open source. There doesn't seem to be many young people working on open source, but we don't really know why that is. There are many thoughts, but a better question is why should anyone get involved in open source anymore? The world has changed quite a lot since open source was created. Show Notes OSPOs for Good 2024

 Listen

Listened to Open Source Security Podcast: Episode 438 - CISA's bad OSS advice vs the Whitehouse good advice
Post details
and talk about two documents from the US government that discuss open source in very different ways. The CISA document lays out a way to measure open source, but we take issue with the idea of trying to measure which open source projects are "good". The Whitehouse on the other hand takes an approach that is very open source, get involved. Trying to measure open source isn't producing anything actionable, but getting involved is very actionable, and very much how open source works. Show Notes

 Repost

Reposted raganwald 🍓 (@raganwald@social.bau-ha.us)
Post details
I used to just block ads and leave it up to others to handle the Digital Panopticon. But now I ask myself, “Why am I giving these people oxygen? If they feel their creativity is best presented with a popup that is surrounded by a blur to force you to interact with it, and then when you make it go away there are header and footer ads, and every two paragraphs there is an ad… I can take a moment and find a different page.” I no longer link to pages that are ads interrupted with content. 🚫

 Repost

Reposted Martin Seeger (@masek@infosec.exchange)
Post details
**Concerning CrowdStrike:** We are now at t+26h. Please compare how much we knew about the xz-attack after less than a day with what we know about the chain of events of giant outage yesterday. If something similar had been caused by an OSS component, we would see congress discussing a ban on open software in critical infrastructure already.

 Note

Strong dislike that #Linkedin's native Web view no longer allows you to copy the URL, or open it in other browsers, and generally making it very hostile to folks who want to ie share the link with someone else, or move it to a read-it-later app

 Repost

Reposted OpenUK (@openuk@hachyderm.io)
Post details
Attached: 1 image In 6 months to 30 April number of people whos code was accepted into open source projects (committers) from the UK increase increased by 1,600 compared to 1,700 in the previous 12 months. Read the OpenUK report to understand OpenUK's plan to build more contributors to open source projects from the UK and our Skills ask of the government. https://openuk.uk/stateofopen/state-of-open-the-uk-in-2024-phase-2-the-open-manifesto #opensource #theopenmanifesto #openuk

 Repost

Reposted Dave Anderson (@danderson@hachyderm.io)
Post details
Also, quick note for crowdstrike execs: everyone can see you looking over at that bus, considering your options, limbering up your throwing arm... Just a note that the people you probably want to hire are watching reeeally closely how you're going to handle this, and are taking notes. The shareholders may be into human sacrifices, but the people you need to run your business aren't. Choose wisely.

 Repost

Reposted Jessica🏳️‍🌈 (@ticky@queer.party)
Post details
I once ran my own personal URL shortener but eventually killed it because it wasn't that useful, but I kept the links working, and in fact they still work _to this day_ because I converted them from a dynamic PHP web application to a little list of nginx URL redirects. Google have comparatively infinite budget and can't figure out how to be a respectful web citizen. https://social.kernel.org/objects/39125e2b-0997-4c90-86f9-b16229bf4b52