Like

Liked Daniel Appelquist (@torgo@mastodon.social)
Post details
Attached: 1 image On my way home from Open Source Summit EU in Prague. So much global cyber policy! If the attendance at sessions and workshops is any measure, CRA and how it impacts the open source ecosystem has become a very hot topic. Guides available at https://policy.openssf.org and free training available here https://openssf.org/tag/cra-training-course/ by the way.

by Jamie Tanna's profile image Jamie Tanna .

 Listen

Listened to Open Source Security: Dependency attacks in 2026 with James Matchett
Post details
Josh chats with Jeff Matchett from Cloudsmith about a new report they put out. It has some scary looking statistics in it about how organizations are using dependencies. There are some surprising numbers in there, but the story is really one of defense in depth. There's no single thing we can do here, it's all about knowing what you have every step of the way. It's easy to say, but certainly a challenge to do right. James is a ton of fun to chat with and filled with energy and knowledge. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-10-james-cloudsmith  

by Jamie Tanna's profile image Jamie Tanna .

 Listen

Listened to Serenity: LIVE! (w/ Nick Kroll) - Earwolf
Post details
HDTGM All-star Nick Kroll (Big Mouth) joins Paul, June, and Jason to discuss the 2019 neo-noir thriller Serenity. Recorded live from Austin City Limits at the Moody Theater, they talk about the big twist that comes way too early, McConaughey being so wet in the movie, the sex scene on the boat, and more. This episode is brought to you by Squarespace (www.squarespace.com/BONKERS), CNN original series: The Movies, Simplisafe (www.simplisafe.com/bonkers), and Allbirds (www.allbirds.com). Subscribe to Unspooled with Paul Scheer and Amy Nicholson here: http://www.earwolf.com/show/unspooled/ Check out our tour dates over at www.hdtgminfo.com! Check out new HDTGM merch over at https://www.teepubli…wdidthisgetmade Where to Find Jason, June & Paul: @PaulScheer on Instagram & Twitter @Junediane on IG and @MsJuneDiane on Twitter

by Jamie Tanna's profile image Jamie Tanna .

 Like

Liked Kostas Konstantinidis (@codesennin.com)
Post details
Automatic dependency update PR-raising tooling! We actually introduced Renovate recently in our azure devops CICD pipeline setup and it works pretty well. For years we didn’t have a dependabot- like solution and I am glad that we now have Renovate to cover that gap! [contains quote post or other embedded content]

by Jamie Tanna's profile image Jamie Tanna .

 Listen

Listened to Closed That Tab: What "How Complex Systems Fail" Teaches Software Engineers by Overcommitted | Software Engineering and Programming Insights
Post details
Closed That Tab is back. Erika finally read Richard Cook's How Complex Systems Fail, an 18 point paper Cook wrote with patient safety and medical systems in mind, but one that is frequently discussed in web development and software engineering since the foundational principles apply universally. Erika and Bethany work through what holds up in practice.They cover the difference between normal failure and catastrophic failure, why knowing your system's baseline is its own skill, and why fixes are never free: every change adds complexity, knowledge gaps, and new risk. They get into safety as a set of defensive actions, including rate limiting, caching, rollback plans, feature flags, backups, playbooks, and watching for drift. Then they take on Cook's most contested claim, that root cause analysis is fundamentally wrong for complex systems, and where they agree and disagree. Bethany makes the case that incident reviews are still one of the best learning tools available, as long as psychological safety comes first.The conversation also digs into hindsight bias and self-blame, the difference between taking accountability and taking blame, practitioners as both the risk and the defense in a system, why training and safety work are chronically undervalued, where AI helps during an incident and where you still need a human expert, practicing failure through game days and shadowing, and keeping on-call sustainable so you do not burn out the people holding the pager.HostsOvercommitted: https://overcommitted.devBethany Janos: https://www.trustyduck.devErika Eggemeyer: https://github.com/eggyheadLinksHow Complex Systems Fail by Richard Cook: https://www.adaptivecapacitylabs.com/HowComplexSystemsFail.pdfThinking In Systems: https://www.chelseagreen.com/product/thinking-in-systems/

by Jamie Tanna's profile image Jamie Tanna .