Kind likes

@westonsteimel@hachyderm.io @fosdem@fosstodon.org would make for a good talk proposal 😉

@andrewnez@mastodon.social @fosdem@fosstodon.org I originally read this as Package Management Doom

So Linux mainline is going to allow for unbranded AI contributions. Tbh I wonder if this is going to be the test for folks' commitments to anti-AI software b/c y'all about to move to a BSD-like?

This author has chosen to make their posts visible only to people who are signed in.

🙋‍♂️ what if one client worked on every forge? 𝔣𝔬𝔯𝔤𝔢𝔰 is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges ✨ forges.link

kubernetes will commit to no longer using kubernetes because we have had critical vulns. instead, kubernetes will be collaborating with @quinnypig.com to migrate kubernetes to route53.

kat, we should stop using kubernetes, because vulns

This aged poorly.

If your response to this vulnerability is "just don't use PHP lol" I have to assume that you know zero about web development and the web outside of a modern bespoke, FAANG, React/Angular, static site generator type of way and you should probably sit this one out 'cause you look a little dumb

I do not like Chainguard. You cannot get me to say a single positive thing about them as a company. Leaking a critical vulnerability in violation of an embargo is outrageous behavior even for them and they absolutely know better.

Here's my WORKING php2shell exploit: <?php $exploit = true; if ($exploit) { echo "#whoami<br>"; echo "Ur fkin root bro."; } ?> (Credit: Claude)

getting that bespoke rehearssy, call it nathan for you

Package Management Devroom at @fosdem has been accepted for Sunday Afternoon, CFP coming soon 📦

No, this post was drafted before, just held up by server maintenance demands.

it happened again [contains quote post or other embedded content]

when it’s going great:

https://lobste.rs/s/gqepzd/wine_ported_openbsd look at how fine and normal this conversation is when they don't know that claude was involved

My "Lime bikes are not for jousting" t-shirt has people asking a lot of questions already answered by my shirt https://www.bbc.com/news/articles/c9zrdpg7256yo

There should be some kind of calculator where whenever a billionaire donates some amount of money, you can quickly what percentage that is of their net worth, apply it to your own net worth and see how much of a sacrifice it actually is

@andrewnez@mastodon.social this is funny because it’s not me :)

It’s just a tag. If you think coding with LLMs is good, then why does it bother you?

What does "LLM agents are real" mean?

audiophiles are like i came as soon as i heard

Heh. Just clicked over, and look who's number one! ;) Was it the comments underneath that made you decide to quit lobste.rs, or something else?

I hope the usage of the tag “vibecoding” isn’t what’s putting you off from the site. It’s got a very particular (and contentious) meaning that isn’t really at all attached to what “vibecoding” means in other circles. It‘s basically applied to anything tangentially related to LLM use

This Week in Package Management: 17 October 2026 https://nesbitt.io/2026/10/17/this-week-in-package-management.html

Websites that steal focus from a text input you're typing in to something else that's loaded afterwards can get in the fucking bin

<no value>

Eve to Adam: [contains quote post or other embedded content]

😂 fair. Idk, I worked there 2022-2026. There was definitely a lot of "hey we need to scale" talk, but I think the total amount took a lot of folks off-guard. It's also kinda hard to scale when you're already GIANT.

"I publish a magazine" you have a substack 😭

no no that’s for fascist developers, not normal people

computa make Linux usable for normal people

Also how am I both "anti-AI" and "pro-AI"? That's how you know these moderation lists aren't driven by sensible folks, lol

check out this neat glass

six work trips in eight weeks, three of which are to the united states, what even is this fucking job (rhetorically)

Explore key takeaways from the Alpha-Omega roundtable at OSS EU 2026, featuring discussions on open source cybersecurity, SEIRs, criticality cohorts, and project sustainability.

Since Alexander Skarsgard is a topic right now I want y'all to know one time at DragonCon I went as Felicia from Darkstalkers, and he sent someone across the room to go get me so he could take a picture that he insisted was for his mom. He is weird but in a very charming way.

Y'all aren't getting a photo of me in that costume but what do you mean this is for your mom lol

I have had the displeasure of integrating with a few different APIs over the past few weeks while working to automate Vori’s onboarding flow. These APIs have been for systems including contract rendering and e-signature collection, invoicing/billing systems, CRMs, card processors and gateways, and card terminal providers.

To be fair he didn’t have the mustache

@www.jvt.me@www.jvt.me someone said there was an unattended bag, so probably just precautions to search it by pyrotechnics.

Attached: 1 image On my way home from Open Source Summit EU in Prague. So much global cyber policy! If the attendance at sessions and workshops is any measure, CRA and how it impacts the open source ecosystem has become a very hot topic. Guides available at https://policy.openssf.org and free training available here https://openssf.org/tag/cra-training-course/ by the way.

The many police cars and red tapes both inside and outside, and the alternative exit path was a nice touch to end the conference though.

See how Chainguard built forkstore to securely manage public CVE fixes and embargoed Athena patches on the same open source packages.