Kind listens

 Listen

Listened to Open Source Security Podcast: Episode 435 - polyfill.io - open source is too big to fix
Post details
and talk about the latest polyfill.io mess. Apparently someone took over a very popular project and started to serve malware. First XZ, now this. What does it mean for open source? We don't have any answers, and it's hard to even talk about this problem because it's so big. The thing is though, even if we can't fix open source, it's here to stay. Show Notes

 Listen

Listened to Cup o' Go | The Go release that was completely Expected, conferences, and cookies! đŸȘđŸȘđŸȘ
Post details
Go 1.22.5 & 1.21.12 releasedConferencesđŸ‡źđŸ‡± GopherCon Israel, Sept 9 @ Tel AvivCFP open until Jul 15🇩đŸ‡ș GopherCon AU, NoCFP open until Sept 15🇼🇳 GopherCon India, Dec 1 @ JaipurNew proposal: include abandoned packages in list of deprecationsBlog post: gRPC: The Good Parts by Kevin McDonaldđŸȘ New...

 Listen

Listened to Dependencies are dangerous (Go Time #321)
Post details
Dependencies! We need them, but how do we use them effectively and safely? In this week’s episode Kris is joined by Ian and Johnny to discuss the polyfill.io supply chain attack, the history of dependency management and usage in Go, and the Go Proverb that “a little copying is better than a little dependency”. Of cours...

 Listen

Listened to Every commit is a gift (Changelog Interviews #444)
Post details
Maintainer Week is finally here and we’re excited to make this an annual thing! If Maintainer Week is new to you, check out episode #442 with Josh Simmons and Kara Sowles. Today we’re talking Brett Cannon. Brett is Dev Manager of the Python Extension for VS Code, Python Steering Council Member, and core team member for...

 Listen

Listened to Responsive, Generative, Accessible, Unions, The Web - Ethan Marcotte by Schalk Neethling 
Post details
In this episode of the Mechanical Ink podcast, host Schalk Neethling sits down with Ethan Marcotte, a prominent figure in web design known for coining the term "responsive web design." Ethan's journey in the design world spans over two decades, during which he has significantly influenced how websites are created and experienced across various devices.

 Listen

Listened to "Ted Danson and Woody Harrelson" on Conan O'Brien Needs a Friend
Post details
<p>Woody Harrelson feels supercalifragilistic about being Conan O’Brien’s friend; Ted Danson feels scared.</p><p> </p><p>Woody and Ted sit down with Conan to discuss their new podcast Where Everybody Knows Your Name with Ted Danson and Woody Harrelson (Sometimes), meeting, and pranking each other, on the set of Cheers, houseboat aspirations, and more. Later, Conan consults with his de facto assistant David Hopping about his presence on TikTok.</p><p> </p><p>For Conan videos, tour dates and more visit <a href="http://TeamCoco.com">TeamCoco.com</a>.</p><p>Got a question for Conan? Call our voicemail: (669) 587-2847.</p>

 Listen

Listened to The Business of Open Source | Ensuring the Difference in Value between Project and Product is Big Enough with André Eriksson
Post details
This week on The Business of Open Source, I spoke with AndrĂ© Eriksson, founder and CEO at Encore. We talked about how open source develops trust, something I also discussed in the episode I recorded with Reshma Khilnani. For Encore, it’s subtly different, though. In the case of Medplum, open...

 Listen

Listened to simplyblock's Cloud Commute - Access Policy Management at Cloud-Scale with Anders Eknert from Styra | RSS.com
Post details
The podcast episode of simplyblock's Cloud Commute features Chris Engelbert interviewing Anders Eknert. They discuss Anders' background and current role at Styra, the company behind the Open Policy Agent (OPA) project. Anders lives and works in Stockholm, Sweden, and has been involved with Styra for about three and a half years. He shares how his previous work led him to OPA due to a need for managing complex authorization requirements across diverse environments.Styra, founded by the creators of OPA, focuses entirely on the OPA ecosystem. They offer two main products: Styra DAS (Declarative Authorization Service) and an enterprise version of OPA. Styra DAS helps manage OPA at scale, providing a control plane for policy management, lifecycle, and auditing. The enterprise OPA offers enhanced performance, lower memory usage, and direct integrations with data sources.OPA itself is a policy engine that enables policies as code, allowing for decoupled and centralized policy management. Common use cases include authorization and infrastructure policies, where OPA acts as a layer between services to make policy decisions. The discussion highlights the importance of treating policy like any other code, allowing for testing, reviewing, and versioning.Chris and Anders also discuss the functionality of OPA from a developer's perspective, explaining how it integrates with services to enforce policies. They touch on the broader benefits of a unified policy management system and how OPA and Styra DAS facilitate this at scale, ensuring consistency and control across complex environments.If you have questions for Anders, you can find him here:Blog: https://www.eknert.com/LinkedIn: https://www.linkedin.com/in/anderseknertX/Twitter: https://twitter.com/anderseknertMastodon: https://hachyderm.io/GitHub: https://github.com/anderseknert/Styra and the Open Policy Agent can be found here:Styra Website: https://www.styra.com/Styra LinkedIn https://www.linkedin.com/company/styra/Styra X/Twitter: https://twitter.com/styraincOPA Website: https://www.openpolicyagent.org/OPA X/Twitter: https://twitter.com/openpolicyagentOPA GitHub: https://github.com/open-policy-agent/opaThe Cloud Commute Podcast is presented by simplyblock (https://www.simplyblock.io)

 Listen

Listened to Legacy Code Rocks: Quality-Check of External Dependencies with Feross Aboukhadijeh
Post details
Many of the largest companies rely on third-party code to run critical parts of their software. However, there's often little focus on ensuring the quality of these external dependencies. Today we speak with Feross Aboukhadijeh, CEO and founder of , a developer-first security platform. Socket helps developers and security teams release software faster and reduce time spent on security busywork. Feross is also a lecturer at Stanford, where he teaches CS233 Web Security. We discuss why the quality of third-party dependencies matters, when to start addressing this issue, how to handle unmaintained dependencies, and what tools are available for managing third-party dependencies. After listening to the episode, be sure to visit the connect with Feross on , and check out his . Mentioned in this episode: Socket at &nbsp; Feross on X at &nbsp; Feross website at: &nbsp;

 Listen

Listened to Red Hat CentOS Stream vs HashiCorp BSL: the view from downstream | IT Ops Query by PodBean Development 
Post details
Josh Koenig and David Strauss are co-founders at Pantheon, a platform for building and operating websites. Josh is the chief strategy officer, and David is the CTO. Open source software is a big part of the web, and Pantheon is a downstream user as well as a contributor to several open source projects. David is an early contributor to systemd, a component of Linux distributions, a member of the Drupal security team, and was a founding member of the first Fedora Server working group in 2011. Josh and David share their views as downstream consumers of open source software as well as members of the community, touching on why enterprises don't contribute more to open source, the approach to open source policy and licensing changes by two different major vendors in Red Hat and HashiCorp, efforts to shore up the security of the web by moving to memory-safe languages, and more. Come for the industry insights, and stay for the many colorful analogies in this discussion, from tugboats to tofurkey. Editor's Note: This episode was recorded before IBM agreed to acquire HashiCorp.

 Listen

Listened to Is it too late to opt out of AI? featuring our favorite tech lawyer, Luis Villa (Changelog &amp; Friends #46)
Post details
Tech lawyer Luis Villa returns to answer our most pressing questions: what’s up with all these new content deals? How did Google think it was a good idea to ship AI Summaries in its current state? Is it too late to opt out of AI? We also discuss AI in Hollywood (spoilers!), positive things we’re seeing (or hoping for) ...

 Listen

Listened to Weighing open source project funding options, from taxes to anarchy | IT Ops Query by PodBean Development 
Post details
Justin Warren is founder and principal analyst at PivotNine, a technology consulting and analyst firm based in Melbourne, Australia. Until 2023, he was a board member at Electronic Frontiers Australia, a non-profit national organization representing Internet users. At KubeCon North America last year, he asked a press conference panel of enterprise IT leaders what they were doing to compensate open source maintainers "so they don't starve to death."A self-described "filthy socialist," Warren favors a tax or tax-like system for funding open source libraries that are widely used but not full-fledged products -- especially when the alternative is an offer from a malicious actor maintainers can't refuse. Together, Warren and Beth explore various approaches to shoring up the maintenance, security and sustainability of open source software and discuss the future outlook for the industry in this episode.