211
VLC vs. the App Stores
Currently, we cannot update VLC on Windows Store, and we cannot update VLC on Android Play Store, without reducing security or dropping a lot of users…
New
The latest blog posts to take off on Hacker News. 1,100 posts.
212
PuTTY vulnerability vuln-p521-bias
Home | FAQ | Feedback | Licence | Updates | Mirrors | Keys | Links | Team Download: Stable · Snapshot | Docs | Privacy | Changes | Wishlist
213
Kate editor on all platforms
Unix like systems with X11 or Wayland All Unix like systems with either X11 or Wayland are well supported since ever. Linux with X11 and now Wayland is for a long time the primary system on that Kate work happens. Over the years it was, like most of the KDE applications, ported to various BSD variants. Be it some…
214
Making Truth Social Comply with the AGPL
Defending Mastodon from Donald Trump's social media
215
OpenBSD is a cozy operating system
With the recent release of OpenBSD 7.5, I decided to run through my personal OpenBSD “installer” for laptop/desktop devices. The project is built off of the dwm tiling window manager and only installs a few basic packages. The last time I updated it was with the release of 7.3, so it’s been due for an minor rework.
216
217
Lessons I learned from working full-time on a FOSS project for 503 days
This article shares some of the lessons I learned from working full-time on a FOSS project for 503 days.
218
Debian Git Monorepo
Lars Wirzenius Consulting Ltd has created a Git repository with the source code of Debian 12 (bookworm), the main component. It's one repository for all the source code, as one commit. It's a monorepo .
219
The xz attack shell script
Andres Freund published the existence of the xz attack on 2024-03-29 to the public oss-security@openwall mailing list. The day before, he alerted Debian security and the (private) distros@openwall list. In his mail, he says that he dug into this after “observing a few odd symptoms around liblzma (part of the xz…
220
Timeline of the xz open source attack
Over a period of over two years, an attacker using the name “Jia Tan” worked as a diligent, effective contributor to the xz compression library, eventually being granted commit access and maintainership. Using that access, they installed a very subtle, carefully hidden backdoor into liblzma, a part of xz that also…
221
The end of Pepper&Carrot and my next project
Hey, I feel like I'm at a big crossroads and this is an important blog post, but you probably already guessed that from the title.
222
Xz: A microcosm of the interactions in open source projects
Originally a thread on Twitter about the xz/liblzma vulnerability, when I finished typing it, I realized I had a real world slice of Open Source interaction that deserved more attention.
223
Everything I Know About the XZ Backdoor
Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries
224
Two open source projects with great architecture documentation
esbuild and Redis1 are two examples of codebases with exceptional documentation. Through their READMEs, changelogs, architecture documents, and code comments, both projects explain their design in such a way that someone new to the codebase can understand where things are, how things are done, and why they are done…
225
Mental Health in Open Source
TL;DR : I am doing great and not going anywhere. Having some pressure but still holding up and trying to improve. Thank you and don’t worry!
226
Affordable Wheel Based Refreshable Braille Display
On HN [1] I came into contact with Mahmoud Al-Qudsi ( mqudsi@neosmart.net ) , who mentioned that he'd been working off-and-on on a braille reader that is both affordable and easy to manufacture. He sent me a some files and pointed to a patent [2] that he took out on a device that uses octagonal wheels with codes on…
227
What I learned from looking at 900 most popular open source AI tools
[Hacker News discussion, LinkedIn discussion, Twitter thread]
228
I no longer maintain my Emacs projects on Sourcehut
I am switching away from SourceHut because it no longer fits my workflow.
229
230
The Berkeley Software Distribution
UNIX is always litigious
231
A Bug in Early Creative Commons Licenses Has Enabled Copyleft Trolls (2022)
Copyleft trolls, robosigning, and Pixsy.
232
233
French court issues damages award for violation of GPL
On February 14, 2024, the Court of Appeal of Paris issued an order stating that Orange, a major French telecom provider, had infringed the copyight of Entr’Ouvert’s Lasso software and violate…
234
The Disappointing Tea.xyz
I got a pull request from "tea.xyz" related individual and unraveled a mess of a disappointing project.
235
A retrospective on Requests
After writing my thoughts on github3.py down here, someone was asking about Python libraries that people recommend new Python developers read for learning how to structure code and use the packaging systems. My initial reaction was "Don't listen to folks that tell you to read python-requests as a good example." When…
236
Some OpenBSD features that aren't widely known
In this article, you will learn about some OpenBSD features you may not know about
237
Releasing my tools under the MIT License was probably a mistake (2023)
For basically as long as I can remember, I have been a staunch defender of permissive licenses over the more copyleft variety. I want you to use things I've written. On top of that I don't believe it's my place to force you to then open source things you have written that expand upon my source code. Hence my extensive…
238
Paying people to work on open source is good
If you have a problem with maintainers getting paid then you have a problem with me and I suggest you let that one marinate.
239
Guix on the Framework 13 AMD
wingolog: article: guix on the framework 13 amd
240
FOSDEM 2024: my experience, some notes and tech tips
I'm sleep-deprived, completely exhausted, but incredibly excited about the whole experience. Here are my notes, impressions and a lot of pictures about FOSDEM 2024.