Background We build a bunch of stuff for RISC-V using the Dart official Docker image, but the RISC-V images can often arrive some time (days) after the more mainstream images[1]. That means that if we merge a Dependabot PR for an updated image it might well be missing RISC-V, causing the Continuous Delivery (CD) pipeline to break when trying to do a release 😦

YouTube video by RedMonk

Polanski's increasing popularity has huge implications for the future of British politics

TL;DR Agentic systems are the latest thing being used to solve IT integration issues, becoming the glue squirted into the gaps between systems. But the use of natural language means that the distinction between 'data' and 'code' is almost impossible to make, which causes a whole raft of security concerns. This new glue may be powerful, but it gives off fumes that can cause a bunch of problems.

: They have no need to prove their bonafides

How to uninstall and block snapd on Ubuntu

Pupdate The central heating went on a few days into the month, and it was also soon time for the boys to be wearing their coats out. Max and Milo in their blue fleece coats Interactive Ball Toy Having learned my lesson about dodgy drop shippers last month I ordered from AliExpress when $wife found a fun looking toy in some Dachshund forum.

500 million+ members | Manage your professional identity. Build and engage with your professional network. Access knowledge, insights and opportunities.

TL;DR Supply-chain Levels for Software Artifacts (SLSA) attestations are a great way to show that you care about security, and they're fairly trivial to add to delivery pipelines that produce a single binary or container image. But things get tricky with matrix jobs that build lots of things in parallel, as you then need to marshal all the metadata into the attestation stage, and there isn't a straightforward way to do that.

Talk given at TalosCon in Amsterdam on October 17, 2025. Video to come.

Open source infrastructure meeting strong commercial integration isn’t always a good fit, but Qualcomm and Arduino hope to change that narrative.

Pupdate Autumn is upon us, and it was a wet start to the month, but that hasn't stopped the boys from being enthusiastic about their walks. Miniature Dachshunds Max and Milo on a leafy woodland path Clear scan Milo had another scan at the start of the month, and once again it was clear 🙂 That means we're now on the longest stretch of remission since he got ill.

Register for Open Source SecurityCon 2025