Posts by bagder@mastodon.social
(DIR) Post #B2jegwSWSCh9PnqzKa by bagder@mastodon.social
2026-01-27T23:40:17Z
0 likes, 1 repeats
Look mom, we made it to LWN: https://lwn.net/Articles/1055996/"Stenberg: The end of the curl bug-bounty program"
(DIR) Post #B2jegxaiFEqAvUh2jg by bagder@mastodon.social
2026-01-27T23:51:10Z
1 likes, 0 repeats
@dalias I have not argued against them over-promising and doing all sorts of crap. They do. And will continue to most likely. That's certainly problematic.What I *am saying* though, is that some of the AI (powered code analyzer) tools are better than most non-AI ones. And I think I've seen one or two in my days and I have written a line of code or two.AI can be used to do good. Is it worth the cost? That's a separate question.
(DIR) Post #B2mXNMJgUT0Rc8JYu0 by bagder@mastodon.social
2026-01-29T15:44:11Z
3 likes, 2 repeats
Getting ready for #EOSAwards26
(DIR) Post #B2o1ax54IwfDBSpsJ6 by bagder@mastodon.social
2026-01-30T06:40:04Z
0 likes, 1 repeats
Dries Buytaert of Drupal fame blogged https://dri.es/ai-creates-asymmetric-pressure-on-open-source
(DIR) Post #B2oFB360iTgZfWoqLA by bagder@mastodon.social
2026-01-30T11:33:19Z
1 likes, 0 repeats
GregKH (@gregkh) awarded the Prize for Excellence in Open Source 2026https://daniel.haxx.se/blog/2026/01/30/gregkh-awarded-the-prize-for-excellence-in-open-source-2026/
(DIR) Post #B2qUvp7GOj2BYB5RZI by bagder@mastodon.social
2026-01-31T13:31:03Z
1 likes, 0 repeats
#FOSDEM
(DIR) Post #B2qVBFXuPmO1reuDpI by bagder@mastodon.social
2026-01-31T11:27:05Z
1 likes, 0 repeats
Number of #curl stickers left at #FOSDEM: 2714
(DIR) Post #B2r7Z0dnHOkcqTPmsa by bagder@mastodon.social
2026-01-31T16:06:36Z
1 likes, 0 repeats
The button has been pressed.
(DIR) Post #B2rEIETFJ4cuUhQcoi by bagder@mastodon.social
2026-01-31T22:11:51Z
1 likes, 0 repeats
I received last year's medal retroactively because back then it did not yet exist.ETOOMANYMEDALS
(DIR) Post #B2sE3FLnwm0Q2OlIxc by bagder@mastodon.social
2026-02-01T09:45:33Z
1 likes, 1 repeats
Every company is doing something wrong in Open SourceSo you can begin proving your worth to them by finding and fixing it/ James Bottomley (@jejb)
(DIR) Post #B2sjyWc7X5A8fDBb0K by bagder@mastodon.social
2026-02-01T15:43:53Z
1 likes, 0 repeats
I'll do a talk at #FOSDEM in 16 minutes. Join me in Janson
(DIR) Post #B2xaMoSSoPXLCnPZKK by bagder@mastodon.social
2026-02-03T22:20:45Z
1 likes, 0 repeats
I hope I'm not the only one who think that a solid test suite for your project has proven more important than ever.That's the wall crappy AI-generated PRs can't climb over.
(DIR) Post #B2yPRaj8O2fDjHFF8S by bagder@mastodon.social
2026-02-04T08:31:33Z
1 likes, 0 repeats
if you search for my name among that huge pile of documents that now show how everyone wanted to hang out with him, you get several hits. Several PDFs that contain the curl license, for various software products it seems.I assume this is exactly how I easily get into trouble. Like sometimes when trying to travel... 😕
(DIR) Post #B2yYmuQxDBy6W8ytSy by bagder@mastodon.social
2026-02-04T09:58:05Z
0 likes, 1 repeats
Switching away from Hackerone is not a guarantee... Here we go.
(DIR) Post #B2zS1oCSANST0RJebI by bagder@mastodon.social
2026-02-04T21:19:01Z
0 likes, 1 repeats
New financial contributor to #curl: Open Broadcaster Software ($10,000.00)
(DIR) Post #B3B4rFbVyINPlSYPCa by bagder@mastodon.social
2026-02-10T09:41:35Z
0 likes, 0 repeats
"It is important that whatever is done in the name of Open Source attestations motivates the manufacturers to do their part. If attestations for OSS should have a possibility to work, there needs to be motivations and incentives for OSS projects to submit such attestations and contribute to the process. Good Will is not going to be a strong enough driving factor."Me, providing feedback on the idea.
(DIR) Post #B3B4rIEEDKX3u6gLp2 by bagder@mastodon.social
2026-02-10T11:10:06Z
0 likes, 0 repeats
@smallsees I propose: money
(DIR) Post #B3B4rJxzkejfIL6PnU by bagder@mastodon.social
2026-02-10T11:36:30Z
0 likes, 0 repeats
@smallsees @giacomo no warranty and no money is where we start, where we are now. I can't see any open source project doing attestations unless given motivation and I can't figure out a motivation that would work better than the plain old money
(DIR) Post #B3B4rLXpst00BmsYIi by bagder@mastodon.social
2026-02-10T09:44:56Z
0 likes, 0 repeats
If you too want to feedback on the idea of Open Source CRA attestations (basically projects officially saying that they are "good projects" in a CRA sense), here's the surveyhttps://dialog-cybersicherheit.limesurvey.net/113884
(DIR) Post #B3B4rR4HLgvBJr6240 by bagder@mastodon.social
2026-02-10T09:47:47Z
0 likes, 0 repeats
while you wait on the survey to come back to life, here's the relevant associated FOSDEM 2026 talk:https://fosdem.org/2026/schedule/event/QEZ3LB-cra_-_role_of_free_software_and_q_a/