Notices by Matt "msw" Wilson (msw@mstdn.social), page 2

@Ric From my POV, we'll have to see how the Redis community responds.

@Ric I mean, a hard fork already exists (KeyDB).

How it started: "This change has zero effect on the Redis core license, which is and will always be licensed under the 3-Clause-BSD."

How it's going: "Beginning today, all future versions of Redis will be released with source-available licenses. Starting with Redis 7.4, Redis will be dual-licensed under the Redis Source Available License (RSALv2) and Server Side Public License (SSPLv1)."

#FreeSoftware #OpenSource #OSS #FOSS #Redis

https://redis.com/blog/redis-adopts-dual-source-available-licensing/

I'm glad that the page with all the historical sponsors of Redis will live on in the git repository for redis.io.

Because it's been deleted from the live site.

#FreeSoftware #OpenSource #OSS #FOSS #Redis
https://github.com/redis/redis-doc/commit/69921f506c02f65606498cfb4c083c6d8f91f125#diff-37e42b9ec4444d471df6fb6ecdf749410085a20c7c345f76de31fae9ed69be1f

Unpopular opinion: "patch all the things" was a zero interest rate phenomenon.
#InfoSec #CVE #SBOM #Linux #OpenSource #OSS #FOSS #Patching
https://www.redhat.com/en/blog/patch-management-needs-a-revolution-part-4

@ramsey @aral when I get replies constructed with narrative advancing framing like "we both know the reason", I regret trying to engage in a dialog in good faith.

@aral I can imagine why you may believe it's easy. You'll just have to trust me when I say it's not.

@aral data residency regulations are only making this problem worse, from my personal point of view.

@lcamtuf I had exactly this kit. Good memories.

#FerryLife #BainbridgeIsland #Seattle #SunriseSunset #pnw #wawx #wawxpic

This is your regular reminder that CVSSv3 base scores are information-poor, and taken alone are not fit for the purpose of evaluating appropriate actions to take for a given security vulnerability.

I am hoping that CVSSv4 helps improve industry practices. It's badly needed.

#InfoSec #CVSS #CVE
https://csrc.nist.gov/csrc/media/Presentations/2023/update-on-cvss-4-0/jan-25-2023-ssca-dugal-rich.pdf

"These repositories are available under the same BSL license as Sentry’s core repos."

So... It will *become* open source... eventually... in about 4 years or so.

#FreeSoftware #OpenSource #FOSS #OSS #SoftwareFreedom #SourceAvailable

https://about.codecov.io/blog/codecov-is-now-open-source/

Anybody remember when you sometimes had to retry FTP connections because there were limits on how many concurrent users could be logged in?

#ThrowBackThursday on Friday.

@mattdm @bconoboy @doctormo @vathpela @funnelfiasco In the arguing for Fedora to exist (and the Red Hat Linux project before it), "project vs. product" was in part highlighting how the a "project" is an ongoing process to produce work-product ("this is my passion project"), and in part positioning the work-product as unqualified for use in production settings ("you would never rely on something that is a project for your business, you need a commercially supported product.").

@mattdm @bconoboy @doctormo @vathpela @funnelfiasco I feel like we emphasized the latter part to a very high degree to convince our executives to let us do the Red Hat Linux Project, as they were concerned about RHEL cannibalization.

This is part of the reason we had to re-brand the Red Hat Linux Project as "Fedora".

#Ferrylife

#Ferrylife

#Ferrylife

#Ferrylife