Mastodawn

HILBARROM Apr 14

[ AO ]

YOU MAY LOVE AND HATE LIFE, BUT YOU WILL NOT KNOW WHAT TO DO AFTER YOU DIE.

Check Out My Music Album VITA

[ 7 SONGS ]

AVAILABLE ON SPOTIFY, YOUTUBE MUSIC, APPLE MUSIC, TIDAL AND ANY OTHER MUSIC APP OF YOUR CHOICE.

[ Music & Writing By ©HILBARROM ]

#HILBARROM #VITA #OriginalMusic #IndieArtist #AlphaOmega

Josh Bressers Mar 30

This week I had a chat with Michael Winser about securing open source at scale

We recorded prior to the events of the last few weeks, everything Michael talks about with securing our infrastructure is spot on

We touch on package repositories, Alpha Omega, foundations, and more. Michael is doing some really interesting work

https://opensourcesecurity.io/2026/2026-03-michael-winser/

#opensource #alphaomega #supplyChainSecurity

Open Source Security at scale with Michael Winser

Josh talks to Michael Winser about a talk he gave at FOSDEM as well as his work on Alpha Omega at the Linux Foudnation. Michael is approaching open source security in a way that nobody has ever tried before. What if we could fund some really big, really hard projects? It’s not cheap or easy, but he’s getting it done. We spend a lot of the time discussing package registries, which are a huge topic. Michael is doing some amazing work helping package registries which is the first step in a very long journey.

Open Source Security

Show thread

Stewart X Addison Feb 11

Another great #FOSDEM talk from Michael Winser at @openssf / #AlphaOmega about the terrible economics of package registries like #NPM #maven #PyPi #RubyGems #crates

https://fosdem.org/2026/schedule/event/8WJKEH-package-registry-economics/

Some charts from different registries are at https://go.xwind.io/registry-research-report

The slide below is a take on some of the common "solutions" that people come up with for funding registries (also applicable to non-registry products with large numbers of downloads) and what might happen if you choose them

Show thread

marvus Feb 7

@sebastianha @kuketzblog
Ich kann #alphaomega und #Ditutu bestätigen,
möchte aber ein interessantes Detail ergänzen:
Bei mir gab es die Verbindung zu firebaselogging auschließlich an den 2 Tagen, an denen ich das wlan einer Fritzbox genutzt habe - sonst nie.
Es haben haben sich sogar weitere F-Droid-Apps mit firebaselogging verbunden, immer mit dem Anhang .fritz.box., sowie Verbindungen zu images.fritz.box/443 und crl3.digicert.com.fritz.box/143.
Ich nutze das freie Betriebssystem lineage os