Like

Liked Bimbo (@BigTittyBimbo@kolektiva.social)
Post details
Now we're cool with genocide in the west (thanks so much exposure therapy!) How long until we see nerve agents and mustard gas being deployed by the big western powers? How long until that advances to using tactical nuclear weapons in foreign lands? How long before this madness consumes every living thing that remains?

 Repost

Reposted OpenUK (@openuk@hachyderm.io)
Post details
Attached: 1 image 10 July - Second OpenUK Digital Meet-up! Join Dr Dawn Foster, James Humphries and host Jamie Tanna, in their talks on high-profile forks, their impacts and the challenges of launching a fork. Register https://www.meetup.com/openuk/events/301139203/?utm_medium=referral&utm_campaign=share-btn_savedevents_share_modal&utm_source=link #openuk #digitalmeetup #opensourcelondon

 Listen

Listened to Open Source Security Podcast: Episode 435 - polyfill.io - open source is too big to fix
Post details
and talk about the latest polyfill.io mess. Apparently someone took over a very popular project and started to serve malware. First XZ, now this. What does it mean for open source? We don't have any answers, and it's hard to even talk about this problem because it's so big. The thing is though, even if we can't fix open source, it's here to stay. Show Notes

 Reply

Glad to hear, hope it's of use. We're looking at packaging some of it up so teams can be writing tests for regexes in their own repos, without needing to set up the whole framework themselves 🤞🏽

Oh no that's a typo! Will fix that now

 Listen

Listened to Dependencies are dangerous (Go Time #321)
Post details
Dependencies! We need them, but how do we use them effectively and safely? In this week’s episode Kris is joined by Ian and Johnny to discuss the polyfill.io supply chain attack, the history of dependency management and usage in Go, and the Go Proverb that “a little copying is better than a little dependency”. Of cours...

 Repost

Reposted Adrian Cochrane (@alcinnz@floss.social)
Post details
If there's one thing I've learned as a browser-engine dev: Everything is political! The most mundane things (e.g. how we answer "what time is it?") has the weight of historical politics behind it. Software freedom is a political project, you can't "leave politics out of it"! It makes a lot more sense to ask "how is this political?" than "is this political?". Because it is!

 Repost

Reposted Aral Balkan (@aral@mastodon.ar.al)
Post details
Technology is political. If your project or organisation has a “no politics” clause, you’re saying you’re happy to exclude people whose very existence is political in our societies. It’s only defensible if you’re coming from a place of privilege where the dominant politics are to your advantage so you can take them as given. There is no such thing as “no politics”; there is only “no politics other than the politics of the status quo that I benefit from, which I’ve internalised as normal.”

 Like

Liked Anders Eknert (@anderseknert@hachyderm.io)
Post details
While I’m ranting: how the fuck and when did “having to learn something new” become a thing generally accepted as a burden? Getting to learn shit *while getting paid for it* is an enormous fucking privilege of working in tech, and if you can’t recognize and appreciate that, please step aside for someone who does.

 Like

Liked Toby! (@ThatOneGuyT_T@mastodon.social)
Post details
The funniest part of capitalist ideology is that someone managed to convince everyone that "freedom" meant like, the freedom to choose between 63 kinds of shampoo and not the freedom to quit a job you hate without the possibility of becoming homeless. #jobs #usa #capitalism #progressive #freedom #politics #anticapitalism