This website uses some nice visualisation to illustrate just a fraction of how much our modern digital infrastructure is held up by one or two people working part-time for little or no money. Most...
Four billion phones ask one text file what time it is. One lecturer keeps it up to date in his spare time
This website uses some nice visualisation to illustrate just a fraction of how much our modern digital infrastructure is held up by one or two people working part-time for little or no money.
Most FOSS people know this already but it's presented well here.
This is fantastic! Some of these I was aware of, others not so much. I had no clue that sudo is apparently independently maintained rather than some sort of core *nix component with...
This is fantastic! Some of these I was aware of, others not so much. I had no clue that sudo is apparently independently maintained rather than some sort of core *nix component with distro-specific implementations. Not sure how that’s even possible tbh. When I use it on my Mac, is that Todd Miller’s code too?
I was a JS dev for 15-ish years. I’ve seen the name core-js a million times but I couldn’t tell you what it is. I’m still not sure what it brings to the table that isn’t already baked into V8 or SpiderMonkey. Feels weird that it’s in the position it’s in. I didn’t know about the maintainer’s incarceration either, my jaw hit the floor when I read that and saw the timeline of how he just resumed where left off, once he got out, like nothing had happened.
The one about SQLite was a surprise to me too. That’s used everywhere. Only four devs?
Also— has it really been 12 years since Heartbleed and ShellShock already? Holy moley.
The page phrases it "Four people changed SQLite in the last year" as if that's specific to this year and the project just doesn't get a lot of contributors, but no, there are just only four...
The one about SQLite was a surprise to me too. That’s used everywhere. Only four devs?
The page phrases it "Four people changed SQLite in the last year" as if that's specific to this year and the project just doesn't get a lot of contributors, but no, there are just only four developers and they explicitly don't accept contributions from anyone else. They care a lot about SQLite's code quality.
To extremely oversimplify. Its pretty much just a setuid binary whos job is determining if you are allowed to do a thing based on config files. The "escalation" part is pretty much just the setuid...
sudo
To extremely oversimplify. Its pretty much just a setuid binary whos job is determining if you are allowed to do a thing based on config files. The "escalation" part is pretty much just the setuid handled by the kernel. So yes its pretty portable.
This website uses some nice visualisation to illustrate just a fraction of how much our modern digital infrastructure is held up by one or two people working part-time for little or no money.
Most FOSS people know this already but it's presented well here.
And yes, of course they reference the relevant XKCD
This is fantastic! Some of these I was aware of, others not so much. I had no clue that sudo is apparently independently maintained rather than some sort of core *nix component with distro-specific implementations. Not sure how that’s even possible tbh. When I use it on my Mac, is that Todd Miller’s code too?
I was a JS dev for 15-ish years. I’ve seen the name
core-jsa million times but I couldn’t tell you what it is. I’m still not sure what it brings to the table that isn’t already baked into V8 or SpiderMonkey. Feels weird that it’s in the position it’s in. I didn’t know about the maintainer’s incarceration either, my jaw hit the floor when I read that and saw the timeline of how he just resumed where left off, once he got out, like nothing had happened.The one about SQLite was a surprise to me too. That’s used everywhere. Only four devs?
Also— has it really been 12 years since Heartbleed and ShellShock already? Holy moley.
The page phrases it "Four people changed SQLite in the last year" as if that's specific to this year and the project just doesn't get a lot of contributors, but no, there are just only four developers and they explicitly don't accept contributions from anyone else. They care a lot about SQLite's code quality.
To extremely oversimplify. Its pretty much just a setuid binary whos job is determining if you are allowed to do a thing based on config files. The "escalation" part is pretty much just the setuid handled by the kernel. So yes its pretty portable.