Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 463 posts.
The Logging Services Security Team takes security seriously. This allows our users to place their trust in Log4j for protecting their mission-critical data. On this page, we will help you find guidance on security-related issues and access to known vulnerabilities.
For decades, discussion of software reuse was far more common than actual software reuse. Today, the situation is reversed: developers reuse software written by others every day, in the form of software dependencies, and the situation goes mostly unexamined.
A while back at the awesome maintainerati Ichatted with a few great fellow maintainers about how to scale really big opensource projects, and how github forc...
LibreSSL was officially announced to the world just about exactly five months ago. Bob spoke at BSDCan about the first 30 days. For those who weren't there, I'll quickly rehash some of that material. Also, it's always best to start at the beginning, but then I'll try to focus on some new material and updates.
npm Blog (Archive); updates from the npm team are now published on the GitHub Blog and the GitHub Changelog
Vue.js users using the dependency “node-ipc” are experiencing a supply chain attack protesting the invasion of Ukraine, from a package named “peacenotwar”.
Take control of your web by running your own personal cloud server with Sandstorm.
You may have heard about Fedora Silverblue, the next-generation desktop OS. This article gives you a more complete view about what it is and how it works.
A brief update on the Servo project's renewed activity in 2023
We’re changing our license as we’ve become aware that there are risks associated with permissive open source licenses that corporations that don’t care about open source are happy to take advantage of.
GitLab release announcements and feature highlights.
For many years I was whole hog into the open-source movement and at the time I rarely wrote a stitch of code in my free time that didn’t find itself in a public Sourceforge/GCode/Github repo. 1 However, over time I came to learn that the burden that came with publicly offering code to the universe, to put it mildly…
We've open sourced several components for our secure operating system, called KataOS, on GitHub, as well as partnered with Antmicro
grsecurity is the only drop-in Linux kernel replacement offering high-performance, state-of-the-art exploit prevention against both known and unknown threats.
Let’s make software even better.
I cannot remember the last time I had this much to report. With so many announcements and highlights, I ran out of time and didn’t cover a handful of topics that happened this month. If I find the time, I’ll make a complimentary post later this month to cover the outstanding topics. Before we get into it, I’d also…
Element has chosen to pursue future development of Synapse, Dendrite and associated server-side projects under the terms of AGPLv3.
This blog post is about how we added package versioning to Go, in the form of Go modules, and the reasons we made the choices we did. It is adapted and updated from a talk I gave at GopherCon Singapore in 2018 .
May 2019 UPDATE - The no-cost developer subscription now includes RHEL 8.
Miguel de Icaza's Blog
The final compromise text of the EU Cyber Resilience Act is now officially available, and various open source voices are currently opining on it. This is a complex act and other parts of the open source world (like the Eclipse Foundation and NLNet Labs) have been hard at work to advocate with the EU and member states…
It’s been a whirlwind few weeks here at AlmaLinux, and I’m elated to be able to finally share this update. The future of AlmaLinux OSIn case you missed it, Red Hat announced they will no longer be providing the means for downstream clones to continue to be 1:1 binary copies of Red Hat Enterprise Linux (RHEL). Very…
We at Canonical have conducted a legal review, including discussion with the industry’s leading software freedom legal counsel, of the licenses that apply to the Linux kernel and to ZFS.And in doing so, we have concluded that we are acting within the r […]
Mark Zuckerberg outlines why he believes open source AI is good for developers, Meta and the world.
We’ve trained and are open-sourcing a neural net called Whisper that approaches human level robustness and accuracy on English speech recognition.
Anthropic CEO Dario Amodei on open-weights models
Following the security disclosure published in the v8.8.9 announcement https://notepad-plus-plus.org/news/v889-released/ the investigation has continued in collaboration with external experts and with the full involvement of my (now former) shared hosting provider.
