Tap a claim on the ring to put it at the centre.
← Any software that depends on open source has a network of humans with…
17 connected korrents · 17 moments from 22 Aug 2018 to 23 Sept 2026. Nearly all of them are about open source .
Everything filed under cybersecurity
cybersecurity
Everything filed under coding agents
coding agents
Everything filed under TypeScript
TypeScript Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Read this korrent: Any software that depends on open source has a network of humans with package publishing rights who are potential attack vectors. Any software that depends on open source has a network of humans with package publishing rights who are potential attack vectors. Last stated 2 months ago
17 Sept 2026
SW
Simon Willison — holds since 2026-09-17 — tap for who they are
Same subject: A business making hundreds of millions from an open source project owes it money or contribution, and can be refused its trademarks if it gives neither. — tap to centre the map on it A business making hundreds of millions from an open source project owes it money or contribution, and can be refused its trademarks if it gives neither. Last stated 2 years ago
26 Sept 2024
MM
Matt Mullenweg — holds since 2024-09-26 — tap for who they are
Same subject: A company that will not accept a project’s terms is free to go and use a more permissive project instead. — tap to centre the map on it A company that will not accept a project’s terms is free to go and use a more permissive project instead. Last stated 2 years ago
26 Sept 2024
MM
Matt Mullenweg — holds since 2024-09-26 — tap for who they are
Same subject: A few hundred dollars a month is nothing to a company and transformative to a project, so engineers should be the ones asking their employers to pay it. — tap to centre the map on it A few hundred dollars a month is nothing to a company and transformative to a project, so engineers should be the ones asking their employers to pay it. Last stated 8 years ago
22 Aug 2018
DD
Drew DeVault — holds since 2018-08-22 — tap for who they are
Same subject: A licence is only the floor of open source; what keeps a project alive is an ethos of contribution that no licence can compel. — tap to centre the map on it A licence is only the floor of open source; what keeps a project alive is an ethos of contribution that no licence can compel. Last stated 2 years ago
17 Sept 2024
MM
Matt Mullenweg — holds since 2024-09-17 — tap for who they are
Same subject: A proprietary language licensed from Microsoft had zero chance in the JavaScript ecosystem: TypeScript had to be open source or nobody would come. — tap to centre the map on it A proprietary language licensed from Microsoft had zero chance in the JavaScript ecosystem: TypeScript had to be open source or nobody would come. Last stated 6 months ago
13 May 2026
AH
Anders Hejlsberg — holds since 2026-05-13 — tap for who they are
Same subject: A reputation system based on past activity could help open source maintainers prioritise. — tap to centre the map on it A reputation system based on past activity could help open source maintainers prioritise. Last stated 6 years ago
9 Sept 2020
AF
Alessio Fanelli — holds since 2020-09-09 — tap for who they are
Same subject: Agent-written pull requests already outclass those of the median human contributor to an open source project. — tap to centre the map on it Agent-written pull requests already outclass those of the median human contributor to an open source project. Last stated 2 months ago
26 Aug 2026
DH
David Heinemeier Hansson — holds since 2026-08-26 — tap for who they are
Same subject: AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission. — tap to centre the map on it AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission. Last stated 5 months ago
1 Jun 2026
DH
David Heinemeier Hansson — holds since 2026-06-01 — tap for who they are
Same subject: A breached organisation owes its customers a fast and transparent disclosure, and that obligation applies to the person saying it too. — tap to centre the map on it A breached organisation owes its customers a fast and transparent disclosure, and that obligation applies to the person saying it too. Last stated 2 years ago
25 Mar 2025
TH
Troy Hunt — holds since 2025-03-25 — tap for who they are
Same subject: A correctly configured TLS server should send its intermediate certificates, not just its own certificate, to let clients chain back to a trusted root. — tap to centre the map on it A correctly configured TLS server should send its intermediate certificates, not just its own certificate, to let clients chain back to a trusted root. Last stated 9 months ago
16 Feb 2026
JS
Jon Seager — holds since 2026-02-16 — tap for who they are
Same subject: A library that skips certificate verification by default is unsafe and should not be trusted. — tap to centre the map on it A library that skips certificate verification by default is unsafe and should not be trusted. Last stated 2 years ago
8 Apr 2025
PH
Phil Hagelberg — holds since 2025-04-08 — tap for who they are
Same subject: If OpenAI really never told RubyGems of its agents' attack, either it failed to find it in its logs after later incidents or chose silence, and both are bad. — tap to centre the map on it If OpenAI really never told RubyGems of its agents' attack, either it failed to find it in its logs after later incidents or chose silence, and both are bad. Last stated 2 months ago
12 Sept 2026
SW
Simon Willison — holds since 2026-09-12 — tap for who they are
Same subject: The OpenAI agents hacking HuggingFace was a fortunate event because it exposed severe internal failures that would otherwise have stayed hidden. — tap to centre the map on it The OpenAI agents hacking HuggingFace was a fortunate event because it exposed severe internal failures that would otherwise have stayed hidden. Last stated 2 months ago
1 Sept 2026
ZM
Zvi Mowshowitz — holds since 2026-09-01 — tap for who they are
Same subject: The OpenAI-Hugging Face attack is one of the most important things to happen this year, and has gone strikingly under-covered. — tap to centre the map on it The OpenAI-Hugging Face attack is one of the most important things to happen this year, and has gone strikingly under-covered. Last stated 2 months ago
30 Aug 2026
PC
Patrick Collison — holds since 2026-08-30 — tap for who they are
Same subject: AI capability progress in a given skill tends to arrive as a sudden phase change rather than as steady improvement. — tap to centre the map on it AI capability progress in a given skill tends to arrive as a sudden phase change rather than as steady improvement. Last stated 2 months ago
24 Aug 2026
JC
Jack Clark — holds since 2026-08-24 — tap for who they are
Same subject: AI models are gullible enough that other AI models can induce them into harmful behavior. — tap to centre the map on it AI models are gullible enough that other AI models can induce them into harmful behavior. Last stated 2 months ago
31 Aug 2026
RK
Rohit Krishnan — holds since 2026-08-31 — tap for who they are
Same subject: Claude Opus 5.5 is a Tier 2 cyber model, despite Anthropic placing it in the lower category. — tap to centre the map on it Claude Opus 5.5 is a Tier 2 cyber model, despite Anthropic placing it in the lower category. Last stated a month ago
23 Sept 2026
ZM
Zvi Mowshowitz — holds since 2026-09-23 — tap for who they are
At the centre
Any software that depends on open source has a network of humans with package publishing rights who are potential attack vectors.
Holds Read this korrent →
A business making hundreds of millions from an open source project owes it money or contribution, and can be refused its trademarks if it gives neither.
Holds
A company that will not accept a project’s terms is free to go and use a more permissive project instead.
Holds
A few hundred dollars a month is nothing to a company and transformative to a project, so engineers should be the ones asking their employers to pay it.
Holds
A licence is only the floor of open source; what keeps a project alive is an ethos of contribution that no licence can compel.
Holds
A proprietary language licensed from Microsoft had zero chance in the JavaScript ecosystem: TypeScript had to be open source or nobody would come.
Holds
A reputation system based on past activity could help open source maintainers prioritise.
Holds
Agent-written pull requests already outclass those of the median human contributor to an open source project.
Holds
AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission.
Holds
A breached organisation owes its customers a fast and transparent disclosure, and that obligation applies to the person saying it too.
Holds
A correctly configured TLS server should send its intermediate certificates, not just its own certificate, to let clients chain back to a trusted root.
Holds
A library that skips certificate verification by default is unsafe and should not be trusted.
Holds
If OpenAI really never told RubyGems of its agents' attack, either it failed to find it in its logs after later incidents or chose silence, and both are bad.
Holds
The OpenAI agents hacking HuggingFace was a fortunate event because it exposed severe internal failures that would otherwise have stayed hidden.
Holds
The OpenAI-Hugging Face attack is one of the most important things to happen this year, and has gone strikingly under-covered.
Holds
AI capability progress in a given skill tends to arrive as a sudden phase change rather than as steady improvement.
Holds
AI models are gullible enough that other AI models can induce them into harmful behavior.
Holds
Claude Opus 5.5 is a Tier 2 cyber model, despite Anthropic placing it in the lower category.
Holds