Addressing GitHub’s recent availability issues
We understand the impact outages have on our customers and are sharing details on the stabilization work we’re prioritizing right now.
1_DevOps'ish
NGINX: what happened and where should companies turn next
"There is no number of maintainers of dedicated engineers that can safely and sanely keep Ingress NGINX online."
NVIDIA/OpenShell: OpenShell is the safe, private runtime for autonomous AI agents.
OpenShell is the safe, private runtime for autonomous AI agents. - NVIDIA/OpenShell
Open Source Gave Me Everything Until I Had Nothing Left to Give
I thought I was having a spiritual awakening. I was having a psychiatric emergency. I was at a tech conference in Sweden when it started. I hadn't slept in...
FancyBear Exposed: Major OPSEC Blunder Inside Russian Espionage Ops
FancyBear’s OPSEC failure gives Ctrl-Alt-Intel rare visibility inside Russian espionage operations
DevRel as a Growth Function: Developer Adoption Playbook
The operating system for DevRel leaders—9 chapters, metrics frameworks, audit checklists, and implementation timelines.
OpenAI preps for IPO by end of year, tells employees ChatGPT must be 'productivity tool'
OpenAI has hired the former DocuSign CFO Cynthia Gaylor to run investor relations as the company gears up for a potential IPO.
Researchers disclose vulnerabilities in IP KVMs from four manufacturers
Internet-exposed devices that give BIOS-level access? What could possibly go wrong?
You’ve Finally Figured Out AI at Work—Now Comes the Bill
Companies that now regularly use artificial intelligence are starting to track their workers’ use of tokens, AI’s unit of measurement.
2 Ways to Correct the Financial Times at AWS (So Far)
2 Ways to Correct the Financial Times at AWS (So Far) Amazon's Fastest-Shipping Product Is Now Blog Posts Correcting the Financial Times I've been
When Projects Fail: Why Companies Should Treat Open Source as Infrastructure
Maintaining an open source project is hard. It requires managing a group of people who are largely...
systemd 260 Released: mstack, SysV Service Scripts Removed & AI Agents Documentation
Systemd 260 was just released as the newest stable version of this widely-used Linux init system and service manager
That's a real stretch | U.S. Says Anthropic Is an ‘Unacceptable’ National Security Risk
In a legal filing, the government said it questioned whether the A.I. start-up could be a “trusted partner” in wartime, which led it to label the company a supply chain risk.
Reflections from FOSS Backstage 2026
Reflections from FOSS Backstage 2026
https://fastwonderblog.com/2026/03/18/reflections-from-foss-backstage-2026/
FOSS Backstage is one of my favorite conferences, and again this year, I had an amazing experience. I saw interesting talks, caught up with friends, met new people, and still missed talking to a few people!
As with most conferences in Europe, digital sovereignty was a hot topic with quite a few talks touching on various aspects of the topic. Mirko Boehm talked about the role that open source can play in digital sovereignty, but it’s not quite so simple, since it requires participation in addition to adoption. Nicholas Gates gave a nice overview of the OSOR Report on Open Source in European Local Governments. Jan Lehnardt talked about the Sovereign Tech Agency’s Bug Bounty program. Andy Piper introduced how Digital Public Goods (DPGs), like Mastodon, can be part of a digital sovereignty strategy. Jutta Kreyss had a very interesting talk about how the city of Munich has approached measuring digital sovereignty. Dr. Daniel Gerber talked about how a FOSS foundation is working with the state of Saxony in Germany.
There were also many other interesting talks on other topics. Æva Black used an interesting story telling approach to cover some historical inflection points and what we can learn from them to improve the security of open source as we learn how to comply with the Cyber Resilience Act. Dr. Wolfgang Gehring shared some of what they’ve learned running an inner source program at Mercedes-Benz. Benjamin Nickolls and Andrew Nesbitt talked about how they dove into some ecosyste.ms data in an attempt to answer the question, “Is the InnerSource Commons good for open source?”, which they asked during a talk at last year’s FOSS Backstage event. Max Mehl and Cornelius Schumacher focused on the supply chain but by looking at how to balance risk, value, and people with the OSPO sitting at the intersection of all three. I also moderated a panel with Peculiar C. Umeh, Ruth Ikegah, and Stephen Walli to talk about educating the next generation of open source contributors.
These are just a few of the talks that I attended, and I heard that some of the talks I missed were also great! Videos of most or of the talks should be available soon, so I encourage you to have a look when they are published!
Related Resources:
Digital Sovereignty Runs on Open Source
The Impact of Funding for Sustainable Open Source Projects
Sustainable Open Source Leadership
From Data to Action: Building Healthy and Sustainable Open Source Projects
Contributor Sustainability Impacts Risk and Adoption of OSS Projects
What can your OSPO do about power dynamics, rug pulls, and other corporate impacts on OSS sustainability?
Funding Open Source Sustainability at CHAOSScon and FOSDEM
If you want help with your open source strategy, I’m available for consulting engagements.
Keynote image of Æva Black by the FOSS Backstage photographer.
8_Friends
How Can Governments Pay Open Source Maintainers?
When I worked for the UK Government I was once asked if we could find a way to pay for all the Open Source Software we were using. It is a surprisingly hard problem and I want to talk about some of the issues we faced. The UK Government publishes a lot of Open Source code - nearly everything developed in-house by the state is available under an OSI Approved licence. The UK is generally pretty…
Nvidia unveils AI computing module for space-based data centers
Nvidia unveils AI computing module for space-based data centers Nvidia unveils AI computing module for space-based data centers
Exclusive: Big Tech companies sign pledge to work together to stop global scams
Scammers have only become more organized and impactful in recent years, forcing tech companies to rethink their strategies for protecting their users.
Writing an agent skill
Most developers now use coding assistants. I do too—Copilot at work, Claude Code at home. As a developer, I prefer not to repeat myself. This post explains why and how to avoid repetition as a skill. Don’t Repeat Yourself The DRY principle has been present in the software development field for ages. The idea is that if you copy and paste code in multiple places and a bug appears, you’ll need to fix the bug in all these places.
My custom agent used 87% fewer tokens when I gave it Skills for its MCP tools
Today’s web apps don’t seem particularly concerned about resource consumption. The simplest site seems to eat up hundreds of MB of memory in my browser. We’ve probably gotten a bi…
Switzerland built an alternative to BGP. Nobody noticed
Feature: SCION: Proven in banking and healthcare, slow to spread everywhere else
NVIDIA/NemoClaw: NVIDIA plugin for secure installation of OpenClaw
NVIDIA plugin for secure installation of OpenClaw. Contribute to NVIDIA/NemoClaw development by creating an account on GitHub.
human.json
A lightweight protocol for humans to assert authorship of their website content and vouch for the humanity of others.
![[New Threat Intelligence] European Security Vendor Targeted by Hackers Fronting as Cisco Domain](https://rdl.ink/render/https%3A%2F%2Fspecopssoft.com%2Fwp-content%2Fuploads%2F2026%2F03%2Fcisco-phishing-campaign-sign-in-page.png?width=92&height=&ar=&mode=&dpr=2)
[New Threat Intelligence] European Security Vendor Targeted by Hackers Fronting as Cisco Domain
The threat intelligence team at Outpost24 (Specops’ parent company) highlights a sophisticated phishing campaign exploiting Cisco domains.
Nvidia GTC 2026: CEO Jensen Huang sees $1 trillion in orders for Blackwell and Vera Rubin through '27
At Nvidia's annual developer conference, CEO Jensen Huang said the company is seeing booming demand for its latest technology.
Stairway to GitOps: Scaling Flux at Morgan Stanley
Reflecting on Morgan Stanley's journey to production GitOps with Flux, presented at FluxCon NA 2025.
cartography-cncf/cartography: Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database. - cartography-cncf/cartography
liorwn/claudetop: htop for your Claude Code sessions — real-time cost, cache efficiency, model comparison, and smart alerts
htop for your Claude Code sessions — real-time cost, cache efficiency, model comparison, and smart alerts - liorwn/claudetop
How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection
Modern kernel anti-cheat systems are, without exaggeration, among the most sophisticated pieces of software running on consumer Windows machines. They operate at the highest privilege level available to software, they intercept kernel callbacks that were designed for legitimate security products, they scan memory structures that most programmers never touch in their entire careers, and they do all of this transparently while a game is running. If you have ever wondered how BattlEye actually catches a cheat, or why Vanguard insists on loading before Windows boots, or what it means for a PCIe DMA device to bypass every single one of these protections, this post is for you.