TheNullChannel retweeted
I'm not saying this is a supply chain attack, but I will say that the behavior is indistinguishable from what someone trying to perform a supply chain attack in the future would do.
TheNullChannel retweeted
I don't have any philosophical or ethical issues with source-available licenses, but their proponents are going to have to address these cease-and-desist threats if they seriously expect them to fix imbalances in OSS sustainability.
Developers working in OSS (OSI/FSF approved licenses) are going to be prevented from engaging with or even looking at source-available projects completely to prevent the risk of lawsuits. It's just too risky to pretend otherwise.
There's no gradual transition here, it's going to be a hard fork in communities if these lawsuit threats keep continuing. And I know which community I'd bet on sticking around.
This isn't "just another license", it's a dramatic shift in norms that's going to result in lawyers coming back. And no one wants that.
TheNullChannel retweeted
Hey! If you'd like to get involved in the open letter we're writing in support of NIST and the NVD in the face of this slowdown in reporting, please join the google group here: groups.google.com/g/nist-nvd…
And request access in the document here: docs.google.com/document/d/1…
TheNullChannel retweeted
#Klustered is launching on @OReillyMedia in April and I'm a little bit excited
Reserve your space now!
😁
oreilly.com/live-events/klus…
TheNullChannel retweeted
Huge news on the horizon for #Klustered!
Ready for an epic comeback? Awesome, because we're giving away 20 Klustered t-shirts!
Simply share this post and we'll slide into your DMs to confirm your entry.
TheNullChannel retweeted
Who's ruining open source more - VCs or foundations? Find out today on our stream with @cra and @reneeshah123!
linkedin.com/events/71512767…
TheNullChannel retweeted
Curious about a truly open source alternative to GitHub?
In 15 minutes, we'll be taking a look at what's new with @giteaio and Gitea Actions with @techknowlogick
Come say hello
youtube.com/watch?v=_2SBUOo6…
TheNullChannel retweeted
In some sort of strange punishment, tomorrow I'll be recording myself trying to upgrade otel to patch CVEs in a few apps.
Candidates are @kyverno, keda, @CertManager, @argoproj or @temporalio.
I have an hour so we'll get through as many as I can, or zero.
TheNullChannel retweeted
🖼️ Our image tagging philosophy as explained by @ImJasonH ⤵️
chainguard.dev/unchained/cha…
TheNullChannel retweeted
If you run @projectcalico - we have a full set of @chainguard_dev images!
0 CVEs vs. hundreds, including criticals in the upstream images! We have the node images, csi , controllers, images, typha - everything to deploy the helm charts with 0 CVEs.
edu.chainguard.dev/chainguar…
TheNullChannel retweeted
Ever thought about doing feature flags with GitOps?
Well, you’re in luck! Join us on Nov 17th as we explore @flipt_io with @mark_a_phelps
RSVP by joining our brand new website!
rawkode.academy/event-detail…
TheNullChannel retweeted
PSA: If you're seeing the Critical zlib CVE-2023-45853 in your docker images, we've patched it in @wolfi_os!
Try out @chainguard_dev images for cleaner scan results!
TheNullChannel retweeted
🥳🎂 We just passed one one year since GA!! A whole year of running a free public good service by our community SREs! Protecting the OSS supply chain 🎂🥳
TheNullChannel retweeted
Critical CVE in zlib time!
This looks like it's in a "contrib" package so it's not officially supported, but there's a straightforward patch and it's definitely going to start lighting up scanners all over the place.
nvd.nist.gov/vuln/detail/CVE…
TheNullChannel retweeted
KubeHuddle - Day 1 - ControlPlane Track youtu.be/cdEfbrzRuoc via @YouTube







