@joshbressers@infosec.exchange
Post #2165323
2026-03-25 08:37 UTC
Replies (8)
-
@joshbressers@infosec.exchange 2026-03-25 10:36
I wrote this up in a bit more detail in a clickbait titled article https://opensourcesecurity.io/2026/03-open-source-eulogy/
-
@liw@toot.liw.fi 2026-03-25 08:39
@joshbressers@infosec.exchange After 35 or so years, I'm getting a little exhausted hearing the end of software freedom predicted. I agree there are risks and dangers. I even agree that certain very big, very rich people and organizations want to kill open source. But we keep surviving.
-
@Di4na@hachyderm.io 2026-03-25 08:57
@joshbressers@infosec.exchange it is not the free. It is the "easy to use"
-
@frank@frankwiles.social 2026-03-25 09:11
@joshbressers@infosec.exchange yeah those issues aren’t going to kill OSS but slop PRs and security reports just might burn out the maintainers. I think that is far more likely.
-
@fersman@mastodonczech.cz 2026-03-25 09:18
@joshbressers@infosec.exchange to me is this discussion funny. Open source was never stronger. Everything is based on opensource. Browsers (chrome, safari), servers (aws, gcp, azure), cell phone (android), network devices. Open source is getting so strong that we realize that it is underfunded and that brings some weakness. All the companies using it should give more back (either money or pay developers).
-
@annika@xoxo.zone 2026-03-25 09:20
@joshbressers@infosec.exchange i'm switching to closed-source corporate software, which is famously bug- and vulnerability-free
-
@jti42@infosec.exchange 2026-03-25 10:06
@joshbressers@infosec.exchange Let me pile onto this story of "free food" with two things: TANSTAAFL: If finance successfully lives by it, it's good enough for the libertarian rooted FOSS field 🤣 Just like in the past, the task is to find out where the cost of the free food is hidden. You can partially outsource that sleuthing to the RedHats of this world or do it yourself. Or just "invest" the money in mopping up the FO after the FA of careless FOSS consumption. A tried & tested story that I keep using with clients to make them understand certain aspects of FOSS: People in certain cities do curbside thrifting, i.e. just dump whatever they don't like anymore right there. Not necccarily trash, but also not 1A-prime quality. That oven or sofa might just serve you for 1-3 years, especially if you're low on funds. It might also blow up your kitchen and the house with it. Certain areas might throw out better stuff on average, some lesser. So it's your job to assess and decide on the risk. And you get to own the upside as well as the downside. So in the end: It'll be yet another case of the figurative blood that is used to write and enforce rules. Maybe we'll see a little less reckless FOSS consumption, maybe not. I'm stacking up on strategic popcorn reserves though regarding the first cases of large(r) scale enforcement of llm-coded commercial SW that has the FOSS IP enforced or SBOM regulations applied to it on "we mean it" mode. That'll either be a prime smores roasting event or the end of the FOSS IP protection.
-
@madduci@mastodon.social 2026-03-25 11:21
@joshbressers@infosec.exchange the golden rule has always been: "never rely on 'latest'" without checking