16 Followers
294 Following
346 Posts

Everything in FOSS that isn't code.
#isolveproblems #thisisreallygoodcoffee

Sat on the Berlin wall the day it fell. From the walled in side. Sat on an Ambulance roof the day the bells rang.

@joshbressers Good take. Cute trash panda. ✅

To your point of
"If those curated services don’t have what the developers need, they will find a way to sneak something through the back door. [...] The biggest threat to open source right now is the lack of support for developers that’s burning them out. Unfortunately we don’t know how to fix that problem yet."

I'd like to offer the comparison of "real engineering disciplines"™️ as amazing amounts of the computer-y and software-y stuff is in risk classes that clearly can compete with machines, buildings, planes and ships, etc.

All burns down to the point of "the effective risk perception of FOSS is not high enough at the right places. Let's make sure it is".

Here goes:
Any leading/acoountable structural engineer, aviation maintenance engineer etc. is responsbile for their work. This means whatever they sign-off on might bring them into jail the express route, very little questions asked, not insurable if it fails.
Thus, they are - in most cases - very inclined to only sign-off on what they believe will not land them in jail. They are very diligent in checking.
The accountable business heads have lesser but similar cases. They invest in protection and control because they are aware of the consequences. The protection is cheaper than the fallout costs.

University education in these fields, at least here, contains substantial education on these rights, requirements, realities, liabilities, etc. They know very well what they are getting themselves into and what they are handling.

The results are that we mostly don't bother about whether a building will collapse on us or - in most cases - use the the absurdly complex aviation system without much care. And rightfully so. There might be some hickups every now and then, but the majority will just work and be failure-operational or failure-tolerant in most cases.

None of this exists in almost all CS or econ/CS mix degree programs. Your average "tech"/"tech adjacent" grad is blissfully unware and ignorant of the reality, their rights, duties and dynamics of what they'll likely be dealing with for the foreseeable future (60-95% FOSS components). This needs to change.

Knowing what can and can not be expected from FOSS will enable people to adjust their engagement and investment in FOSS, make them consider their rights (and duties) and possible ways of enabling sustainability of their engagement before they become a burnt out distress case.
No company or other entity is entitled to free support, free maintenance or even continuation of something they "curbside thrifted" and willingly accepted as "use as is, it's your problem".
If they desire any of the above benefits, they can become the economic counterparty to said sustainability considerations of the origin.

Ensuring uninsurable responsbility for this "curbside thrifting" reliably hits MDs of legal entities of private or public nature will ensure sustained consideration of rights, duties, prevention/mitigation and investment priorities and adjust their risk/reward appetite/tolerance regarding this field according to their risk capability. I have seen substantial amounts of cases where that did happen after only one hit already.

And if properly educated and regulated, this will effective lead to sustained investment in FOSS at scale, in places where it fits the markets demands.
Scale that will clearly be larger and with lesser overhead than all tax money powered indirections I have seen so far, as laudable as the results and intent of them might be.

@ich_iel ...A dangling partici....uh, route table entry! 💥

@joshbressers Let me pile onto this story of "free food" with two things:

  • TANSTAAFL: If finance successfully lives by it, it's good enough for the libertarian rooted FOSS field 🤣

    • Just like in the past, the task is to find out where the cost of the free food is hidden. You can partially outsource that sleuthing to the RedHats of this world or do it yourself. Or just "invest" the money in mopping up the FO after the FA of careless FOSS consumption.
  • A tried & tested story that I keep using with clients to make them understand certain aspects of FOSS: People in certain cities do curbside thrifting, i.e. just dump whatever they don't like anymore right there. Not necccarily trash, but also not 1A-prime quality. That oven or sofa might just serve you for 1-3 years, especially if you're low on funds. It might also blow up your kitchen and the house with it. Certain areas might throw out better stuff on average, some lesser. So it's your job to assess and decide on the risk. And you get to own the upside as well as the downside.

So in the end: It'll be yet another case of the figurative blood that is used to write and enforce rules. Maybe we'll see a little less reckless FOSS consumption, maybe not.
I'm stacking up on strategic popcorn reserves though regarding the first cases of large(r) scale enforcement of llm-coded commercial SW that has the FOSS IP enforced or SBOM regulations applied to it on "we mean it" mode. That'll either be a prime smores roasting event or the end of the FOSS IP protection.

Update: Ongoing Investigation and Additional Activity

Open Source Security Advisory Update: Monday, March 23, 2026 Boston, MA 2:00 AM ET  We are providing this update to share new developments identified during our ongoing investigation into the Trivy open source incident described below.  Over the weekend, the Trivy team continued analysis of the previously reported incident and started implementing additional security measures across repositories and automation …

Aqua

@bkastl So viel  der Artikel ja hergibt, so sehr sei da auch noch mal auf die Eigenbau Optionen a la BSD, OpenWRT usw hingewiesen die notfalls ausnahmslos auf jedem Krempel laufen. Incl. US gefertigter HW. Es wird sich also recht zügig was an Alternativoptionen ergeben.

Auch ist die Frage wie tief in die Fertigung eine solche Vorschrift dann gehen wird.
Und ob sie zum Wiederaufbau lokaler Fertigung, sowie lokalen Fähigkeiten führen wird.

Heute wurde zum ersten Mal Antimaterie in einem LKW transportiert! Wie dieses Experiment am #CERN durchgeführt wurde und was der Beitrag von GSI/FAIR dazu war: https://www.gsi.de/start/aktuelles/detailseite/2026/03/24/base-experiment-am-cern-gelingt-transport-von-antimaterie
#Wissenschaft #Antimaterie #Darmstadt
© CERN
@joshbressers And the one that has an exchangable...uh...container will be called podman? 🥁 🤣

@itdude Hat es. Und zum jetzigen Zeitpunkt wird sie vor dem Verzehr am besten durch ein saftiges Opencode [1] ersetzt, da es keine Limits für API Keys fürs Auth bei Mistral gibt. Mistral Modelle, OpenCode awesomeness. Und fast beliebige andere Modelle gleich mit verfügbar
Und OpenCode ist in der Tat sehr saftig. 😆

[1] https://github.com/anomalyco/opencode/

In the 80s, company pays stock compensation to a bunch of employees, in the form of physical stock certificates. At the time, the comp received by one employee was worth about $7K.

He put the certificates away, forgets about them.

*Jaws theme plays*

2 days later the first attempt at professional networking on ActivityPub, Flockingbird [2] archived their repositories.
Nolto states a similar reason for stopping their efforts:

"As the platform grew, the criticism grew too. Some of it was fair and helpful. Some of it was not. Some of it became personal. Projects like Flockingbird have gone through similar experiences. Small, independent efforts can quickly be treated as if they were fully staffed institutions.

Nolto was never that. It was one person building something interesting to see what would happen.

At this point I have decided to shut it down." [1]

We should learn from these two great prototypes and start the third one right to finally deliver on the idea proven by them. It should be possible in a sovereign, proper FOSS and economically viable and self-sustainable way.

[1] https://codeberg.org/Tensetti/Nolto/src/commit/d4020977444922374916715031af486d1a8981c7/src/pages/Index.tsx
[2] https://github.com/Flockingbird

Nolto/src/pages/Index.tsx at d4020977444922374916715031af486d1a8981c7

Nolto

Codeberg.org