freenode

Formal analysis says early attestation is broken; its spec author says prove it A ProVerif study and eight critical CVEs collide with the draft author's rebuttal that the flaws are implementation bugs, and the argument detours into who is… freenode.net/article/formal-…

None-aware operators reopen Python’s syntax and teachability fights Companion PEPs 823 and 824 force the community to weigh everyday ergonomics against teaching cost, precedence surprises, and sentinel interactions under Steering Council scrutiny. freenode.net/article/none-aw…

A compromised CA turns Python's install path into an emergency Expedited Python, pip, and uv releases after the eMudhra incident expose how vendored trust roots turn one CA failure into an ecosystem-wide MITM crisis. freenode.net/article/a-compr…

Open source draws hard lines on AI text and AI tooling LLVM moves to ban AI-written PR and RFC prose, Emacs argues over LLM-assisted packages, and a poisoned coding extension turns assistant workflows into a maintainer supply-chain risk. freenode.net/article/open-so…

Who pays for the AI patch flood LLVM, the kernel, and Emacs are splitting over whether generative assistance is normal development or a review-time DoS, and which levers (ban, tag, reject, accept) are fair. freenode.net/article/who-pay…

Review bandwidth, not model quality, drives the AI contribution backlash From LLVM's proposed ban on AI-written PR text to the kernel dropping Assisted-by tags and GNU stalling LLM-assisted packages, maintainers are treating extractive AI… freenode.net/article/review-…

When intermediate CAs fail, language stacks discover they own the blast radius Flawed eMudhra P-384 intermediates forced same-week certifi purges and expedited Python, pip, uv, and ssl releases, exposing how package install paths outsource trust… freenode.net/article/when-in…

Projects draw hard lines as AI contributions eat reviewer time LLVM, the kernel, and Emacs are fighting the same battle: how to protect scarce maintainer attention without shutting out legitimate help. freenode.net/article/project…

No shared playbook: FOSS projects diverge on policing AI patches and prose LLVM, the kernel, Debian, and QEMU are inventing incompatible rules for AI text, attribution tags, and automated review just as maintainer bandwidth collapses under… freenode.net/article/no-shar…

When one CA's weak P-384 keys force everyone else to purge trust Flawed eMudhra intermediates triggered root removals, Python toolchain freezes, and a sharper fight over who should own the CA bundle. freenode.net/article/when-on…

BPF unwinding lets Rust and C++ keep their destructors New unwind instructions aim to make exceptions and RAII viable in BPF just as Rust is being pushed into parsing untrusted kernel-facing protocols, trading verifier complexity for safer… freenode.net/article/bpf-unw…

Virtual swap collides with what memory.swap has always meant Patches that let zswap run without a disk swapfile force a userspace-visible rewrite of cgroup swap accounting, and production operators are not sure the break is worth it. freenode.net/article/virtual…

Nixpkgs core team exits as packaging megaprojects hit the burnout wall A ten-month experiment in consensus leadership ends in attrition, while store rewrites and other distro policy fights expose the same unpaid-authority gap. freenode.net/article/nixpkgs…

Who owns the patch when the model wrote it? Kernel maintainers and Emacs developers are drawing the same line at once: undisclosed LLM help is not a process detail, it is a trust and philosophy problem. freenode.net/article/who-own…

HAWK break and McEliece caution feed doubts on PQC readiness A practical key-recovery result on HAWK and a BSI warning against new Classic McEliece deployments crystallize skepticism about several post-quantum candidates just as migration clocks… freenode.net/article/hawk-br…

Python free-threading races to define what race-free actually means PEP 805's ownership states and a push to document concurrency models collide as core developers try to freeze free-threaded semantics before ecosystem assumptions fracture. freenode.net/article/python-…

Free-threaded Python forces the concurrency contract into the open PEP 805's object-state checks and a push to write down distinct memory models mark the shift from GIL-hidden races to explicit programmer assumptions. freenode.net/article/free-th…

BPF unwind pads race to free Rust panics from the verifier's grip Multi-revision series for exception cleanup landing pads aim to let Rust Drop run on panic, while maintainers push back on verifier complexity and edge cases with tracing. freenode.net/article/bpf-unw…

Burnout Meets Harder Levers: Governance Strain Across Nix, IETF, and Fedora Volunteer capacity is collapsing just as projects reach for firmer moderation and process controls, leaving legitimacy questions unresolved. freenode.net/article/burnout…

When the maintainers leave the room From Nixpkgs to the TLS working group, open projects keep rediscovering that technical excellence does not scale care, conflict, or authority. freenode.net/article/when-th…