The Linux Foundation had $300 million in revenue in 2025.

[engideer@tech.lgbt]

@nVentor @hbons "We never said we meant a community with any humans in it"

[c0dec0dec0de@hachyderm.io]

@tante @hbons yeah, I don’t know if they ever were, but I am sad to see them do this shit. There was once a reasonable course on defensive coding of something that they produced and put up on edX that I liked. And I like most of the OpenSSF scorecard ideas—enough that I tried to take them and deploy them at work to make it easier to evaluate internal software products that were notionally things that could be shared or “leveraged”.

[yatil@yatil.social]

@hbons Clearly Flip-Floppies.

[iju@mastodon.social]

@ptesarik @licho @hbons

Mistakes like this is how you end up with dwarves kicking over a model of Stonehenge.

https://m.youtube.com/watch?v=qAXzzHM8zLw&t=140

[iain@kolektiva.social]

@hbons look, Linus needs his money

[groxx@hachyderm.io]

@hbons stores twice as much data!

[c0dec0dec0de@hachyderm.io]

@tante @hbons TBF most of that scorecard is basic shit like “be clear about licensing burdens on your shit” and “test your stuff and tell people the results”, “you should encrypt things in transit”, “make sure you list a point of contact”, “have you heard of fuzzing? It’s good.”

[hbons@mastodon.social]

@iain money and free computers

[madalex@fosstodon.org]

@ptesarik @licho @hbons

In German the translation for inch is Zoll and thus in speaking about the three different sizes you referred to a 8 Zoll Diskette for example (which was my first floppy disk).

[hbons@mastodon.social]

@iain free as in beer

[gary_alderson@infosec.exchange]

@hbons like mozilla, suricata, people don't realize how much money is in open source, lots, but they keep it hidden

[the_alsatian@mastodon.social]

@hbons 🤮

[iain@kolektiva.social]

@hbons find an interesting blogpost on the formation of LF recently and why it shouldn’t need all the cash it has

[iain@kolektiva.social]

@hbons am getting more against all these “independent” trade bodies

[iain@kolektiva.social]

@hbons why are these floating?

[crazyeddie@mastodon.social]

@c0dec0dec0de @tante @hbons TBF this is what most standards are like. If you ever read ISO 62304 for example it's all stupid simple stuff like, "Consider your customer's needs," which is not a real quote but is a fairly close paraphrase of its real content.

Costs almost $400 per copy.

The really ridiculous thing is that we actually need that crap.

[hbons@mastodon.social]

@crazyeddie @c0dec0dec0de @tante I need to get more shameless...

[aaron@social.caskey-demaret.se]

@hbons

“We never stop learning!” I scream as I surrender the last of my cognitive facilities to the machine.

[crazyeddie@mastodon.social]

@hbons @c0dec0dec0de @tante I actually imagine it would be really hard work to create a standard like that. It's going to be law so people will HAVE to follow it. It therefor can't say too much or everyone gets stuck in the legacy of the current modern at best. It can't say too little or there's no damn point.

Companies really do have to have their hands held and told to encrypt shit. Then you have to make sure they don't do stupid shit like use rot13 and call it good (actually saw this).

[c0dec0dec0de@hachyderm.io]

@crazyeddie @tante @hbons it is honestly depressing how much of what I ask of people to do at work (and that they refuse to do) is basic due diligence that we’re already contractually obliged to do by one or more linked documents.
Fuck, UCF is tainted by LLMs now. That sucks.