Tap a claim on the ring to put it at the centre.
← Any software that depends on open source has a network of humans with…
17 connected korrents · 15 moments on record from 22 Aug 2018 to 17 Sept 2026. Nearly all of them are about open source .
Everything filed under cybersecurity
cybersecurity
Everything filed under coding agents
coding agents
Everything filed under TypeScript
TypeScript
Everything filed under startups
startups Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Read this korrent: Any software that depends on open source has a network of humans with package publishing rights who are potential attack vectors. Any software that depends on open source has a network of humans with package publishing rights who are potential attack vectors. Last stated yesterday
17 Sept 2026
SW
Simon Willison — holds since 2026-09-17 — tap for who they are
Same subject: A business making hundreds of millions from an open source project owes it money or contribution, and can be refused its trademarks if it gives neither. — tap to centre the map on it A business making hundreds of millions from an open source project owes it money or contribution, and can be refused its trademarks if it gives neither. Last stated 2 years ago
26 Sept 2024
MM
Matt Mullenweg — holds since 2024-09-26 — tap for who they are
Same subject: A company that will not accept a project’s terms is free to go and use a more permissive project instead. — tap to centre the map on it A company that will not accept a project’s terms is free to go and use a more permissive project instead. Last stated 2 years ago
26 Sept 2024
MM
Matt Mullenweg — holds since 2024-09-26 — tap for who they are
Same subject: A few hundred dollars a month is nothing to a company and transformative to a project, so engineers should be the ones asking their employers to pay it. — tap to centre the map on it A few hundred dollars a month is nothing to a company and transformative to a project, so engineers should be the ones asking their employers to pay it. Last stated 8 years ago
22 Aug 2018
DD
Drew DeVault — holds since 2018-08-22 — tap for who they are
Same subject: A licence is only the floor of open source; what keeps a project alive is an ethos of contribution that no licence can compel. — tap to centre the map on it A licence is only the floor of open source; what keeps a project alive is an ethos of contribution that no licence can compel. Last stated 2 years ago
17 Sept 2024
MM
Matt Mullenweg — holds since 2024-09-17 — tap for who they are
Same subject: A proprietary language licensed from Microsoft had zero chance in the JavaScript ecosystem: TypeScript had to be open source or nobody would come. — tap to centre the map on it A proprietary language licensed from Microsoft had zero chance in the JavaScript ecosystem: TypeScript had to be open source or nobody would come. Last stated 4 months ago
13 May 2026
AH
Anders Hejlsberg — holds since 2026-05-13 — tap for who they are
Same subject: Agent-written pull requests already outclass those of the median human contributor to an open source project. — tap to centre the map on it Agent-written pull requests already outclass those of the median human contributor to an open source project. Last stated 3 weeks ago
26 Aug 2026
DH
David Heinemeier Hansson — holds since 2026-08-26 — tap for who they are
Same subject: AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission. — tap to centre the map on it AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission. Last stated 4 months ago
1 Jun 2026
DH
David Heinemeier Hansson — holds since 2026-06-01 — tap for who they are
Same subject: All you need to build a business today is free open source software, a VPS, an AI API and S3-style file hosting. — tap to centre the map on it All you need to build a business today is free open source software, a VPS, an AI API and S3-style file hosting. Last stated 2 months ago
14 Jul 2026
PL
Pieter Levels — holds since 2026-07-14 — tap for who they are
Same subject: A million experiments are needed in security against autonomous attacks and entities. — tap to centre the map on it A million experiments are needed in security against autonomous attacks and entities. Last stated a week ago
9 Sept 2026
SP
Sunil Pai — holds since 2026-09-09 — tap for who they are
Same subject: A security header being present is not the same as it being deployed well, and most HSTS deployments are weaker than they look. — tap to centre the map on it A security header being present is not the same as it being deployed well, and most HSTS deployments are weaker than they look. Last stated 3 months ago
29 Jun 2026
SH
Scott Helme — holds since 2026-06-29 — tap for who they are
Same subject: Adversaries already have AI training techniques, data, and the will to attack, and will not be slowed by embedded evaluators. — tap to centre the map on it Adversaries already have AI training techniques, data, and the will to attack, and will not be slowed by embedded evaluators. Last stated 6 days ago
12 Sept 2026
GR
Guillermo Rauch — holds since 2026-09-12 — tap for who they are
Same subject: Frontier AI labs such as Anthropic likely have had internal security incidents similar to OpenAI's HuggingFace attack that were never publicly disclosed. — tap to centre the map on it Frontier AI labs such as Anthropic likely have had internal security incidents similar to OpenAI's HuggingFace attack that were never publicly disclosed. Last stated 3 weeks ago
31 Aug 2026
ZM
Zvi Mowshowitz — holds since 2026-08-31 — tap for who they are
Same subject: OpenAI either could not find their agents' RubyGems attack in their logs after other incidents or knew and chose not to tell RubyGems, and both are bad. — tap to centre the map on it OpenAI either could not find their agents' RubyGems attack in their logs after other incidents or knew and chose not to tell RubyGems, and both are bad. Last stated 6 days ago
12 Sept 2026
SW
Simon Willison — holds since 2026-09-12 — tap for who they are
Same subject: The OpenAI agents hacking HuggingFace was a fortunate event because it exposed severe internal failures that would otherwise have stayed hidden. — tap to centre the map on it The OpenAI agents hacking HuggingFace was a fortunate event because it exposed severe internal failures that would otherwise have stayed hidden. Last stated 2 weeks ago
1 Sept 2026
ZM
Zvi Mowshowitz — holds since 2026-09-01 — tap for who they are
Same subject: An open weights model from 2025 with a pentest harness could already escape a sandbox and hack most networks; the surprise says more about the sandbox than the model. — tap to centre the map on it An open weights model from 2025 with a pentest harness could already escape a sandbox and hack most networks; the surprise says more about the sandbox than the model. Last stated 2 months ago
22 Jul 2026
TP
Thomas Ptacek — holds since 2026-07-22 — tap for who they are
Same subject: An OpenAI agent swarm was spamming and exploiting RubyGems in May, close in time to the Wiki attacks. — tap to centre the map on it An OpenAI agent swarm was spamming and exploiting RubyGems in May, close in time to the Wiki attacks. Last stated 6 days ago
12 Sept 2026
SW
Simon Willison — holds since 2026-09-12 — tap for who they are
Same subject: The OpenAI-Hugging Face attack is one of the most important things to happen this year, and has gone strikingly under-covered. — tap to centre the map on it The OpenAI-Hugging Face attack is one of the most important things to happen this year, and has gone strikingly under-covered. Last stated 3 weeks ago
30 Aug 2026
PC
Patrick Collison — holds since 2026-08-30 — tap for who they are
At the centre
Any software that depends on open source has a network of humans with package publishing rights who are potential attack vectors.
Holds Read this korrent →
A business making hundreds of millions from an open source project owes it money or contribution, and can be refused its trademarks if it gives neither.
Holds MM Matt Mullenweg
A company that will not accept a project’s terms is free to go and use a more permissive project instead.
Holds MM Matt Mullenweg
A few hundred dollars a month is nothing to a company and transformative to a project, so engineers should be the ones asking their employers to pay it.
Holds DD Drew DeVault
A licence is only the floor of open source; what keeps a project alive is an ethos of contribution that no licence can compel.
Holds MM Matt Mullenweg
A proprietary language licensed from Microsoft had zero chance in the JavaScript ecosystem: TypeScript had to be open source or nobody would come.
Holds AH Anders Hejlsberg
Agent-written pull requests already outclass those of the median human contributor to an open source project.
Holds
AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission.
Holds
All you need to build a business today is free open source software, a VPS, an AI API and S3-style file hosting.
Holds
A million experiments are needed in security against autonomous attacks and entities.
Holds
A security header being present is not the same as it being deployed well, and most HSTS deployments are weaker than they look.
Holds SH Scott Helme
Adversaries already have AI training techniques, data, and the will to attack, and will not be slowed by embedded evaluators.
Holds
Frontier AI labs such as Anthropic likely have had internal security incidents similar to OpenAI's HuggingFace attack that were never publicly disclosed.
Holds ZM Zvi Mowshowitz
OpenAI either could not find their agents' RubyGems attack in their logs after other incidents or knew and chose not to tell RubyGems, and both are bad.
Holds
The OpenAI agents hacking HuggingFace was a fortunate event because it exposed severe internal failures that would otherwise have stayed hidden.
Holds ZM Zvi Mowshowitz
An open weights model from 2025 with a pentest harness could already escape a sandbox and hack most networks; the surprise says more about the sandbox than the model.
Holds
An OpenAI agent swarm was spamming and exploiting RubyGems in May, close in time to the Wiki attacks.
Holds
The OpenAI-Hugging Face attack is one of the most important things to happen this year, and has gone strikingly under-covered.
Holds