1
Everything I Know About the XZ Backdoor
Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 26 posts.
2
Model Context Protocol
MCP is an open standard for connecting AI assistants to the systems where data lives, from content repositories to business tools.
3
The SSPL is Not an Open Source License
We’ve seen that several companies have abandoned their original dedication to the open source community by switching their core products from an open source license, one approved by the Open Source…
4
Linux Foundation launches an open source fork of Redis
Community maintainers, contributors, and users will continue collaborative development of an open source, in-memory data store under the new Valkey name.
5
The Open Source AI Definition
version 1.0 See FAQsSee list of endorsementsSee ChecklistEndorse the OSAID Preamble Why we need Open Source Artificial Intelligence (AI) Open Source has demonstrated that massive benefits accrue to…
6
ATProto for distributed system engineers
In this article we're going to explore atproto from the perspective of distributed backend engineering.
7
Timeline of the xz open source attack
Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also…
8
Redis adopts dual source-available licensing
Developers love Redis. Unlock the full potential of the Redis database with Redis Enterprise and start building blazing fast apps.
9
A Bug in Early Creative Commons Licenses Has Enabled Copyleft Trolls (2022)
Copyleft trolls, robosigning, and Pixsy.
10
NVIDIA Transitions Fully Towards Open-Source Linux GPU Kernel Modules
With the R515 driver, NVIDIA released a set of Linux GPU kernel modules in May 2022 as open source with dual GPL and MIT licensing. The initial release targeted datacenter compute GPUs…
11
The xz attack shell script
Andres Freund published the existence of the xz attack on 2024-03-29 to the public oss-security@openwall mailing list. The day before, he alerted Debian security and the (private) distros@openwall list. In his mail, he says that he dug into this after “observing a few odd symptoms around liblzma (part of the xz…
12
Open source AI is the path forward
Mark Zuckerberg outlines why he believes open source AI is good for developers, Meta and the world.
13
Winamp has announced that it is "opening up" its source code
Winamp builds tools that empower artists to manage their music and revenue, while delivering a player that offers a seamless listening experience. Discover our products!
14
Why Oxide Chose Illumos
Servers in the Oxide Rack will form the backbone of both the compute and storage services available to customers. The rack will be composed of a variety of hardware and software components, some of which represent resource-constrained or inflexible environments; e.g., the Service Processor (SP) or Hardware Root Of…
15
Zed, a collaborative code editor, is now open source
From the Zed Blog: We hope you'll join us in our mission to fundamentally advance software collaboration.
16
Elasticsearch is open source, again
Elastic announces the return of open source licensing for Elasticsearch and Kibana, adding AGPL as an option alongside existing licenses. This change reinforces our long-standing commitment to open so...
17
Orphaning bcachefs-tools in Debian
Around a decade ago, I was happy to learn about bcache – a Linux block cache system that implements tiered storage (like a pool of hard disks with SSDs for cache) on Linux. At that stage, ZFS on Linux was nowhere close to where it is today, so any progress on gaining more ZFS features in general Linux systems was very…
18
The Next Big Step in Mojo Open Source
At Modular, open source is ingrained in our DNA. We firmly believe for Mojo to reach its full potential, it must be open source. We have been progressively open-sourcing more of Mojo and parts of the MAX platform, and today we’re thrilled to announce the release of the core modules from the Mojo standard library under…
19
Cracking an old ZIP file to help open source the ANC's "Vula" secret crypto code
It's not often that you find yourself staring at code that few people have ever seen, code that was an important part in bringing down the a...
20
Zig Software Foundation 2024 Financial Report and Fundraiser
Zig Software Foundation is a 501(c)(3) non-profit organization which I am proud to say makes extremely efficient use of monetary resources . Unlike many of our peers, our primary expense is direct payments to contributors for their enhancements to the Zig project.
21
Open Collective Official Statement – OCF Dissolution
Dear Open Collective Community, It is with sad hearts that we have heard the news about Open Collective Foundation decision to dissolve, effective December 31. The full content of their announcement, which came as a surprise to us, can be found here, and they have also created an FAQ. We
22
300k USD Donation Pledged by Mitchell Hashimoto
The donation is structured in two 150k USD payments, one due right away, the second one year from now.
23
KDE Asking for Donations
Why do we ask for donations so often? Because it’s important! As KDE becomes more successful and an increasing number of people use our software, our costs grow as well: Web and server hostin…
24
25
Introducing GNOME 46, "Kathmandu"
Discover what's new in GNOME, the distraction-free computing platform.
26
KDE Plasma 6.0, and KDE Gear 24.02 released
The KDE community proudly presents Plasma 6, Frameworks 6 and Gear 24.02