The next 𝗟𝗼𝗴𝟰𝗦𝗵𝗲𝗹𝗹 is not a matter of 𝘪𝘧, but 𝘸𝘩𝘦𝘯. The critical Java libraries we use daily are built mainly by volunteers

𝗪𝗲 𝗰𝗮𝗻'𝘁 𝘄𝗮𝗶𝘁 𝗳𝗼𝗿 𝗮𝗻𝗼𝘁𝗵𝗲𝗿 𝗱𝗶𝘀𝗮𝘀𝘁𝗲𝗿!

That's why we're building a new solution: a nonprofit partnership between 𝘁𝗵𝗲 𝗰𝗼𝗺𝗽𝗮𝗻𝗶𝗲𝘀 𝘂𝘀𝗶𝗻𝗴 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗝𝗮𝘃𝗮 𝗹𝗶𝗯𝗿𝗮𝗿𝗶𝗲𝘀 and 𝘁𝗵𝗲 𝗺𝗮𝗶𝗻𝘁𝗮𝗶𝗻𝗲𝗿𝘀 (like @pkarwasz of Apache Log4j) who support them.

To build a model that works, we need your input.

👉https://forms.gle/ARYtRvDKewxAC4Ct6

#Java #OpenSource #Log4Shell #Cybersecurity #OpenSSF

Outlier AI. You are doing it wrong.

Hiring people to post completely nonsenese or copy&pasted issues in reputable open-source repositories - and make maintainers train your AI on it ? not good.

There are 50 such issues in last few days in @airflow repo [1] and counting. More details in [2]

[1] https://github.com/apache/airflow/issues?q=is%3Aissue%20state%3Aclosed%20label%3A%22AI%20Spam%22

[2] https://www.linkedin.com/posts/jarekpotiuk_outlier-you-are-doing-it-wrong-please-activity-7289278690213990400-MOuC

Capital Series is heading to Warsaw on June 11th! 🇵🇱 🇪🇺

Join us to explore how #OpenSource can drive Poland's digitalization & security goals during its EU Presidency. 🤝

In partnership with Red Hat Poland, APELL, PIIT, LPI & Apache Software Foundation.

Registrations will be opening soon!

Follow our newsletter to stay updated:
👉 https://lnkd.in/e8SeArqb

#Poland25eu #CapitalSeries

Since I keep seeing developers use ‘pretty’ IP addresses like ’1.2.3.4’ in example configurations; a reminder that you MUST NOT use publicly routable addresses that you do not control in your code.

Instead, use one of the available 'TEST-NET' IPv4 or IPv6 ranges documented in RFC 6890;

192.0.2.0/24
198.51.100.0/24
203.0.113.0/24

❌ 1.2.3.4
✅ 192.0.2.4

and for IPv6;

✅ 2001:db8::/32

Pass it on to all of your fellow developers, documentation writers, and so forth.

Full RFC for special purpose addresses;

https://datatracker.ietf.org/doc/rfc6890/

Reserved for documentation, IPv4 and IPv6;

https://datatracker.ietf.org/doc/rfc5737/
https://datatracker.ietf.org/doc/rfc3849/

1/ 🧵

The #curl CVE we will publish on Wednesday addresses an issue that has existed in source code for almost twenty-five years.

severity low though, so the sky might not fall this week either