Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 126 posts.
The xz attack shell script
Andres Freund published the existence of the xz attack on 2024-03-29 to the public oss-security@openwall mailing list. The day before, he alerted Debian security and the (private) distros@openwall list. In his mail, he says that he dug into this after “observing a few odd symptoms around liblzma (part of the xz…
Our Software Dependency Problem
For decades, discussion of software reuse was far more common than actual software reuse. Today, the situation is reversed: developers reuse software written by others every day, in the form of software dependencies, and the situation goes mostly unexamined.
Why GitHub Can't Host the Linux Kernel Community
A while back at the awesome maintainerati Ichatted with a few great fellow maintainers about how to scale really big opensource projects, and how github forc...
The 100:10:1 method: my approach to open source
For many years I was whole hog into the open-source movement and at the time I rarely wrote a stitch of code in my free time that didn’t find itself in a public Sourceforge/GCode/Github repo. 1 However, over time I came to learn that the burden that came with publicly offering code to the universe, to put it mildly…
Open-source infrastructure is not venture-backable
Let’s make software even better.
The Principles of Versioning in Go
This blog post is about how we added package versioning to Go, in the form of Go modules, and the reasons we made the choices we did. It is adapted and updated from a talk I gave at GopherCon Singapore in 2018 .
Microsoft Open Sources .NET and Mono
Miguel de Icaza's Blog
EU Cyber Resilience Act: What does it mean for open source?
The final compromise text of the EU Cyber Resilience Act is now officially available, and various open source voices are currently opining on it. This is a complex act and other parts of the open source world (like the Eclipse Foundation and NLNet Labs) have been hard at work to advocate with the EU and member states…
Wikileaks To Leak 5000 Open Source Java Projects
Java's not even *fun* enough to laugh at. I expect after your sabbatical you would be trolling at Scala or Haskell or Go ! What's next ? Jokes about making GUIs in VB ? Pshh. Seriously though, I can get the attack on privateness and finality. From someone with a strong dynamic tropism, that makes sense. But that good…
Open Source is one person
The Register recently published a story titled Putin on the code: DoD reportedly relies on utility written by Russian dev. They should be ashamed of this story. This poor open source developer is getting beat up now to score some internet points. It’s very upsetting. But anyway, let’s look at some receipts. If you’re…
Fix it, Fork it, Fuck off (2019)
I write and publish open source code. I quite often get bug fixes, patches, requests and questions regarding the things I have published. Most of the feedback is respectful and helpful. However …
Announcing .NET 2015 – .NET as Open Source, .NET on Mac and Linux
It's happening. It's the reason that a lot of us came to work for Microsoft, ...
A FreeBSD 10 Desktop How-To
A guide to a full-featured modern desktop FreeBSD installation
Rsync and outrage
I gave up blogging a long time ago (apart from an occasional thing about ArduPilot), I tend to just write code and hope people find it…
My Resignation from Freenode
As it is now known, the freenode IRC network has been taken over by a Trumpian wannabe korean royalty bitcoins millionaire. To make a long story short, the former freenode head of staff secretly "sold" the network to this person even if it was not hers to sell, and our lawyers have advised us that there is not much…
Open source confronts its midlife crisis
Midlife is tough: the idealism of youth has faded, as has inevitably some of its fitness and vigor. At the same time, the responsibilities of adulthood have grown: the kids that were such a fresh adventure when they were infants and toddlers are now grappling with their own transition into adulthood – and you try to…
Qubes-Lite with KVM and Wayland
I've been running QubesOS as my main desktop since 2015. It provides good security, by running applications in different Xen VMs. However, it is also …
FatELF: Universal Binaries for Linux (2015)
FatELF is a file format that embeds multiple ELF binaries for different architectures into one file. This is the Linux equivalent of what Mac OS X calls "Universal Binaries."
GNU Recutils
Fred and George, Turtles in love There are hundreds of cool command line tools that have been made over the years built on the unix philosophy. Plain text is powerful, ubiquitous, and human-centric. It was also the only option for computing for quite a while. It’s no surprise that some of the most sophisticated tools…
Flatpak Is Not the Future
Deploying apps for the Linux desktop is hard. A major problem has historically been library compatibility. Different Linux distributions, and even different versions of the same distribution, have had incompatible libraries. Unfortunately, there hasn’t always been a culture of backwards compatibility on the Linux…
OpenBSD: Why and How (2016)
Derek Sivers official site. Thoughts on philosophy, culture, self-improvement. Author of Useful Not True, How to Live, Hell Yeah or No, Anything You Want.
FreeBSD – a lesson in poor defaults
This page lists some of the changes I make to a vanilla install of FreeBSD for security hardening. Some changes to increase network performance or make things a bit more sane are also included. It only covers basic changes that a sysadmin can make to a running system.
How Not to Support Desktop GNU+Linux, Zoom Edition
<small>Pssst! Formatting messed up? Add ".md" to the url ✨ If you're stuck using Zoom, jump on [one](https://community.zoom.com/t5/Meet...