One of the most famous software exploits in recent years was the SolarWinds attack in 2020. In this attack, Russian hackers inserted malicious code into the SolarWinds Orion system, allowing them to infiltrate the systems of numerous corporations and government agencies, including the U.S. executive branch, military, and intelligence services. This was an example of

Kyle of iFixit offers an insightful glimpse into the world of repair, open-source contributions, and the potential futures of hardware.

Stephen Augustus, the Head of Open Source at Cisco, shares his experiences and insights about contributing to and maintaining open source projects including Kubernetes and OpenSSF Scorecard. Stephen highlights the importance of building sustainable practices and the value of having product, program, and project management skills in open source projects. Discussions delve into the inner workings of the Kubernetes project, the role and functionality of the OpenSSF Scorecard, and the process of incorporating new contributors and projects. He further emphasizes the importance of transparency and intentionality in corporations' involvement in open source projects. 00:00 Introduction and Guest Background00:22 Stephen's Journey into Open Source and Kubernetes05:41 The Success Factors of Kubernetes06:09 Maintaining the Maintainers: The Balance of Work in Open Source06:28 The Role of Corporations in Open Source09:03 The Overwhelming Nature of Open Source Contribution10:10 The Impact of Kubernetes on Other Open Source Projects10:59 The Increasing Complexity in Full Stack Development12:29 The Importance of Open Source Project Management20:27 OpenSSF Scorecard  Guest: Stephen Augustus is a Black engineering director and leader in open source communities. He is the Head of Open Source at Cisco, working within the Strategy, Incubation, & Applications (SIA) organization. For Kubernetes, he has co-founded transformational elements of the project, including the KEP (Kubernetes Enhancements Proposal) process, the Release Engineering subproject, and Working Group Naming. Stephen has also previously served as a chair for both SIG PM and SIG Azure. He continues his work in Kubernetes as a Steering Committee member and a Chair for SIG Release. Across the wider LF (Linux Foundation) ecosystem, Stephen has the pleasure of serving as a member of the OpenSSF Governing Board and the OpenAPI Initiative Business Governing Board. Previously, he was a TODO Group Steering Committee member, a CNCF (Cloud Native Computing Foundation) TAG Contributor Strategy Chair, and one of the Program Chairs for KubeCon / CloudNativeCon, the cloud native community’s flagship conference. He is a maintainer for the Scorecard and Dex projects, and a prolific contributor to CNCF projects, amongst the top 40 (as of writing) code/content committers, all-time. In 2020, Stephen co-founded the Inclusive Naming Initiative, a cross-industry group dedicated to helping projects and companies make consistent, responsible choices to remove harmful language across codebases, standards, and documentation. He has previously held positions at VMware (via Heptio), Red Hat, and CoreOS. Stephen is based in New York City.

This week on The Changelog we’re joined by Drew DeVault, talking about the Hare programming language. From the website, Hare is a systems programming language designed to be simple, stable, and robust. When we asked Drew why he created it, he said “[because] I wanted it to exist, and it did not exist.” Wise words. We d...

This week we’re gleaming the KubeCon. Ok, some people say CubeCon, while others say KubeCon…we talk with Solomon Hykes about all things Dagger, Tammer Saleh and James McShane about going beyond cloud native with SuperOrbital, and Steve Francis and Spencer Smith about the state of Talos Linux and what they’re working on...

Announcements🔐 Go 1.21.5 & 1.20.12 pre-announcement🧊 Go 1.22 frozen, this time for realCommunity☕️ Mattproud's great Reddit answer for Java developers🐍 Another good blog post from Preslav about Python vs GoRich Hickey's talk about a similar subject🦪 Ralf Steube developed a really cool tool for...

Gergely Orosz is back for our annual year-end update on the tech market, writ large. How is hiring? Has AI really changed the game? What about that OpenAI fiasco? We also talk in-depth about Gergely’s self-published book, The Software Engineer’s Guidebook, which has been four years in the making.

Since its inception, Joyent has sought to build robust services for elastic compute and storage infrastructure. For much of our history, our runtime of choice...

Nicolas Höning is the Co-Founder and CEO of Seita, an open-source energy optimization and digitalization company. Nicolas took an unconventional path to founding an open-source startup, and throughout this episode he describes how creating a greener world through open-source software is more...

Lars Kamp is the Co-Founder and CEO of Some Engineering, the makers of Resoto. In this episode, Lars describes what he’s learned from founding and working at multiple start-ups, as well as the main differentiators he’s experienced founding his first open-source startup. Lars describes his though...

This week we’re joined by Mark Côté, who leads the Developer Infrastructure organization at Shopify, to learn about their developer survey program. Mark shares what went into designing and running the survey, what they’ve done to drive participation rates higher, and how they interpret their...

The open source coding philosophy has enormous appeal to many software engineers, and with good reason. Open source libraries, applications, and operating systems are now essential to the overall technology ecosystem. And the number of open source projects is only increasing. But many developers don’t know how to get involved in open source. Or, they

Doc Searls and Simon Phipps talk with Luis Villa of Tidelift about how it helps code maintainers get paid, plus what's happening in AI, ML, regulation and more.

Manton Reece, creator of Micro.blog, stops by to talk about the history of Micro.blog, what it's written in, how it handles feeds coming in and going out, cross-posting, authentication, and the somewhat hidden features of Micro.blog: bookmarking, bookshelves, and even podcasting.