1
I’m now a full-time professional open source maintainer
It works! I am now a full-time independent open-source maintainer. I'm announcing my first cohort of six clients, and sharing some details of how the model works.
Filippo Valsorda
We now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48() seeded with the time, which was indeed in 1997–98.
- Popular posts
- 26
- Total points
- 6,821
- HN comments
- 2,464
- Rank
- #137 personal
Visit words.filippo.io → RSS feedOn Hacker News Jan 2022 – Oct 2026
Security & Privacy 20Programming Languages 5Software Engineering 4Open Source 4Math & Algorithms 4Tools & Productivity 3
2
Geomys, a blueprint for a sustainable open-source maintenance firm
Announcing Geomys, a small firm of professional maintainers with a portfolio of critical Go projects.
3
Why did the OpenSSL punycode vulnerability happen?
We look at how fuzzing should have caught the OpenSSL Punycode vulnerability, and why that code was even necessary in the first place.
4
How to Pay Professional Maintainers
To successfully fund Open Source projects, companies should: pay the maintainers; pay them real money; pay for maintenance; and keep paying them.