Fred Brooks died last month at age 91. Thanks to his best-selling software development management book, The Mythical Man-Month Essays on Software Engineering, he became a programming and management legend. Over the decades, I’ve met many tech…Read More

A new class of software supply chain vulnerability in GitHub Actions and Rust leverages artifact poisoning to attack the underlying software development pipelines. People are way too inclined to believe that just because some program, language,…Read More

At the Open Source in Finance Forum (OSFF) in New York City, the Fintech Open Source Foundation (FINOS) Dec. 8 announced the results of its 2022 State of Open Source in Financial Services Survey. The results were — to no … Continue reading →

Opinion Linus Torvalds is happy to tell you that Linux release numbers aren’t a big deal. As the Linux supremo said of the 6.0 release: “Despite the major number change, there’s nothing fundamentally different about this release – I’ve long … Continue reading →

It has been about a year since the security hole at the heart of the open source Java logging library Apache Log4j was revealed. The resulting zero-day vulnerability, CVE-2021-44228, aka Log4Shell, is still with us today. That’s crazy! But it’s … Continue reading →

Opinion It’s a toss-up between Elon Musk’s management misadventures and Twitter’s technical troubles as to which will cause the most damage. Twitter is in trouble. I mean, who blunders his way into a fight with Apple only to later claim … Continue reading →