Latest from Steven

Docsy for AI Agents, Oh, and People Too
Google’s Docsy is joining the Linux Foundation as AI agents become documentation readers. Prague — When I grew up in programming, if you didn’t understand something in the code or operating system, you were told to Read The Fine (Ah, yeah, fine) Manual (RTFM). Of course, back then we actually had manuals and documentation. Since […]
Oct 8, 2026 · 3 minAll articles by Steven J. Vaughan-Nichols
Showing 1–24GitHub Slams the Brakes on Private Vulnerability Reports
Drowning in AI-generated bug reports? GitHub has a radical answer: Stop accounts from reporting them. GitHub’s new limits on bug reports aren’t a solution to the AI bug-report flood. Anything but! They’re an admission that the traditional security-disclosure workflow, with human maintainers in the loop, simply doesn’t scale. The scarce resource is no longer discovering […]
US District Court Decision in AI’s Favor Worries Open-Source Developers
A federal appeals court handed GitHub, Microsoft, and OpenAI an important win in the first major appellate ruling over how AI coding tools can use open-source code. As we all know, all the AI code-generating programs learned their lessons largely from open-source code. So a group of anonymous open-source plaintiffs argued that GitHub Copilot and […]
Akrites: The Latest Attempt to Protect Open-Source From AI Attacks Has Arrived
Akrites, a new Linux Foundation initiative backed by many of the world’s largest tech and financial firms, is the industry’s latest attempt to get ahead of AI‑accelerated software supply chain risks by hardening critical open source projects before attackers can exploit them. On June 25, the Linux Foundation unveiled Akrites, a coordinated industry program designed […]
Stack Overflow Is Being Reborn as a Back-End Service for AI Agents
Will that stop its decline? We’ll soon find out. Once upon a time, Stack Overflow was, love it or hate it, the site programmers went to find answers for their most annoying development questions. Back then, according to Prashanth Chandrasekar, Stack Overflow’s CEO, the site had “100 million monthly visitors.” Then AI came along. From […]
Can Chainguard Save Open-Source Software From Mythos? Can Anyone?
IBM and Red Hat aren’t the only ones that mean to lock down open-source code against AI hacking tools. Last week, IBM and Red Hat launched Project Lightwell to protect open-source projects with $5 billion and 20 thousand engineers. Not to be outdone, with tongue in cheek, Chainguard’s CEO Dan Lorenc announced a $50 million, […]
OpenSSF’s CRob: ‘The Runway Is Rapidly Running Out’ on EU CRA Readiness
The EU’s Cyber Resilience Act kicks into high gear this September, and companies are still clueless about how they must obey its strictures. MINNEAPOLIS — At Open Source Summit North America, Christopher “CRob” Robinson, Chief Security Architect for the Open Source Software Foundation (OpenSSF), spoke about the European Union’s (EU) Cyber Resilience Act (CRA). CRob […]
When AI Goes Really, Really Wrong: How PocketOS Lost All Its Data
You can’t make this crap up. You just wish you could. Jer Crane, founder of the small vertical software company, PocketOS, reported on X that the AI Cursor coding agent and a Railway backup misconfiguration combined to briefly wipe out the company’s car‑rental customer production data. Not some of the data. All of it. That’s […]
JetBrains Launches Air and Junie CLI to Blend Traditional IDE with AI Agents
JetBrains has launched a new “agentic” tooling stack that pairs a multi‑agent development environment, Air, with a standalone, LLM‑agnostic coding agent, Junie CLI. If you know JetBrains, you probably know it for Kotlin, the statically typed Java Virtual Machine (JVM) language used mostly for Android development, or for its well-known integrated development environments (IDEs), such […]
Codenotary’s Free SBOM Service Tackles the AI Software Supply Chain
Just because AI is writing your code doesn’t mean you can stop worrying about software bills of materials. While the quality of AI coding remains open to debate, there’s no question that everyone and their dog is using it. That means, if you’re serious about using AI in production, you must track its code in […]
Best of 2024: RIP CentOS. Hello AlmaLinux Rocky Linux, CentOS Stream or RHEL
CentOS 7’s official end of life is June 30th. What should a DevOps team do? We help you consider your choices.
Best of 2024: IBM Confirms: It’s Buying HashiCorp
Everyone knew HashiCorp was attempting to find a buyer. Few suspected it would be IBM.
Best of 2024: Valkey is Rapidly Overtaking Redis
Redis is taking it in the chops, as both maintainers and customers move to the Valkey Redis fork.
RIP CentOS. Hello AlmaLinux Rocky Linux, CentOS Stream or RHEL
CentOS 7’s official end of life is June 30th. What should a DevOps team do? We help you consider your choices.
Logz’s AI Chatbot Makes Your Observability Tools Smart(er)
Everyone is adding AI to their applications. Sometimes that’s overkill. But Logz.io’s IQ Assistant, which purports to make the most of your software stack’s records, actually makes sense.
AlmaLinux Introduces Engineering Steering Committee to Enhance Community Collaboration
AlmaLinux is keeping its Linux community in the technology loop.
OpenSSF Siren: Security for One, Security for All
The OpenSSF Siren is a fresh, new take on ye old security mailing list.
Three Reasons DevOps Should Consider Rocky Linux 9.4
The new version of Rocky Linux includes security improvements, better cloud images, and the latest developer tools. All those features should interest any DevOps pro.
Does More Money Improve Open Source Security?
It sounds simple: If you pay developers more money they’ll improve the quality and security of their code. The evidence isn’t so clear.
What OpenTofu 1.7 Means for DevSecOps
With built-in end-to-end encryption, OpenTofu is a natural DevSecOps fit.
IBM Confirms: It’s Buying HashiCorp
Everyone knew HashiCorp was attempting to find a buyer. Few suspected it would be IBM.
Valkey is Rapidly Overtaking Redis
Redis is taking it in the chops, as both maintainers and customers move to the Valkey Redis fork.
OpenSSF warns of Open Source Social Engineering Threats
Linux dodged a bullet. If the XZ exploit had gone undiscovered for only a few more weeks, millions of Linux systems would have been compromised with a backdoor. We were lucky. But can we stay lucky? The Open Source Security Foundation (OpenSF) and the OpenJS Foundation revealed that a similar hackling attempt had targeted several […]
The Commonhaus Way to Manage Open Source Projects
Commonhaus is taking a laissez-faire approach to open source group management.