Eddie Knight
LightNews LightNews
banner
eddieknight.dev
Eddie Knight
@eddieknight.dev
370 followers 200 following 480 posts
Securing open source software is good for everyone.

FINOS TOC; OpenSSF Baseline; CNCF TAG Security & Compliance
Posts Replies Media Videos
eddieknight.dev
It's been a year since we first decided we were going to create the Open Source Project Security Baseline — and it's been a wild ride.

I'll be talking about it during a #OSSummit keynote on Wednesday, but beforehand... let's hang out and celebrate a bit!

www.sonatype.com/event/baseli...
June 16, 2025 at 1:09 PM
eddieknight.dev
This is one talk you should absolutely skip
June 13, 2025 at 4:23 PM
eddieknight.dev
Interestingly, CloudFlare is getting 2x the reports compared to the others I clicked into.
June 12, 2025 at 6:36 PM
eddieknight.dev
Anyone have an explanation for this downtime spike? Reports simultaneously from GCP and AWS, so that's ruled out.

Heatmap from different report pages has major cities reporting from every US region.
June 12, 2025 at 6:31 PM
eddieknight.dev
Graphs always have a way of reminding me that we literally cannot comprehend what our ancestors were thinking, feeling, experiencing in their lifetimes.

Even such a core human element as "a parent's love" would have different meaning if the context is that 2 in 5 kids die before kindergarten.
June 9, 2025 at 4:18 PM
eddieknight.dev
relevant:
May 9, 2025 at 1:02 AM
eddieknight.dev
Apparently I need to start putting content on my personal website, if ChatGPT is gonna send people to it...

Dislike.
April 17, 2025 at 2:42 AM
eddieknight.dev
Now we've lost funding for the common vulnerabilities & exposures system that the entire cybersecurity industry relies on.

gg, well played.
letter from Yosry Barsoum notifying the CVE governing board that it no longer has government funding.
April 15, 2025 at 9:01 PM
eddieknight.dev
This is it, @mikeneeds.rest.

The high water mark. The peak. The climax. The apex. It only goes down from here.
Average Score in the session feedback: 10 out of 10.
April 14, 2025 at 4:37 PM
eddieknight.dev
Litmus test... Share your opinions on this:
A physical notebook with the text: "Password Book: Internet Password Logbook" "Never forget a password again!" "Store usernames, passwords, & web addresses"
April 10, 2025 at 11:51 AM
eddieknight.dev
When the HOA comes to explain why your new mailbox isn't up to code, and why it's very very important that all the mailboxes match.
(this is actually just a picture of me and Mike giving our talk a couple days ago)
April 7, 2025 at 11:15 AM
eddieknight.dev
ICYMI: We have four security workshops on the KubeCon next week!

It'll be less than 5min of me introducing projects and maintainers, then 40min of hands-on time with the project's maintainers.

And we have 4 LEGO Star wars prizes for Impact Contributors!

kccnceu2025.sched.com/type/Experie...
see the attached link for detailed times and locations
March 29, 2025 at 2:48 PM
eddieknight.dev
First time seeing this go mod security feature catch something, and it feels... incorrect.

This taxes my imagination to think of how it would be malicious OR accidental.

Why does this kind of thing only happen when I'm too sleepy to dig in and figure it out 😑
checksum mismatch security error flagged by 'go mod tidy' — but the checksums are nearly identical. only a single letter differs in capitalization. how is that possible?
March 22, 2025 at 2:42 AM
eddieknight.dev
For the uninitiated...
"In 2007, Steven Molaro experimented with Domino's online ordering system by requesting a pizza with no sauce, no cheese, and beef only on the left side. The result was a mostly bare crust with beef on one half, leading to the meme."
March 5, 2025 at 3:47 PM
eddieknight.dev
Terraform + Ansible =

Terr_____ + ___ible ?
March 1, 2025 at 3:37 AM
eddieknight.dev
I can help if you're a DOD warehouse manager who is being asked to go around tapping folks on the shoulder to help them find their login and send the DOGE email.

Here's your template:

- unloaded boxes
- put boxes on shelves
- moved boxes from shelves to other boxes
- labeled boxes
- loaded boxes
Title: "MEMORANDUM FOR ALL DEPARTMENT OF DEFENSE CIVILIAN EMPLOYEES" Text snippet: "Managers of those who do not regularly work in office settings with access to email, e.g. warehouses and shipyards, should address directly with their employees."
February 28, 2025 at 7:08 PM
eddieknight.dev
That's rough, buddy
January 30, 2025 at 4:43 PM
eddieknight.dev
I don't have many internal meetings with colleagues, but every week I have a TON of collaborations with folks from all sorts of organizations all around the world.

If it wasn't for cal.com/knight, I would need a personal assistant— or a different job entirely.
January 17, 2025 at 4:30 PM
eddieknight.dev
A job opening was just shared where you could work in a high impact security role alongside some of my favorite people in open source.

jobs.citi.com/job/irving/c...
January 8, 2025 at 8:39 PM
eddieknight.dev
I'm confused about how to feel.

I got my first ever KubeCon acceptance on the same day that I saw my name on the program beside these heavy hitters.

100% Excited

100% Imposter
January 8, 2025 at 8:04 PM
eddieknight.dev
This is what happened to the Library of Alexandria! The problem wasn't that the building was destroyed— but maintenance slowly ceased and the knowledge it provided was used less and less, with potentially nothing usable remaining inside, until it became just another building destroyed in war.
from https://en.wikipedia.org/wiki/Library_of_Alexandria The Library dwindled during the Roman period, from a lack of funding and support. Its membership appears to have ceased by the 260s AD. Between 270 and 275 AD, Alexandria saw a Palmyrene invasion and an imperial counterattack that probably destroyed whatever remained of the Library, if it still existed.
January 3, 2025 at 5:52 PM
eddieknight.dev
no highly esteemed deed is commemorated here
contribution grid from https://github.com/eddie-knight
January 2, 2025 at 5:20 AM
eddieknight.dev
I watched as thousands of these things (but gold) were filled, sealed, and loaded into trucks every day for months.

Then January hit and the entire facility closed down overnight.
a group of empty #10 cans used for bulk food storage
December 29, 2024 at 10:15 PM
eddieknight.dev
Profile picture checks out
December 19, 2024 at 8:35 PM
eddieknight.dev
If you're a fan of comics— or good people doing awesome things— Check this out.

fisks.co
From Matt Bain: So, earlier in the summer my family got some pretty terrible news, when my eldest son was diagnosed with Leukaemia. As you can imagine it’s been a bit of a rollercoaster since then. My son’s name is Cillian and since his diagnosis back in July he’s had to spend over six weeks in hospital, two months hooked up to a continuous IV that he had to carry around with him and has spent countless more days receiving treatment in hospital, school and home and throughout it all he’s been a rock star. He missed a scout trip to America and the various holidays and trips we had planned and his summer turned into a pretty depressing time. One of the things that Cillian loves is comics and he was fortunate that a number of family members bought him some to read whilst he was in hospital and receiving treatment, some of them far more than is good for them or him! However, whilst sitting in hospital one night chatting, Cillian told me he wanted to do something with all the time he now had on his hands and that was to start a comic book store. This is how https://fisks.co/ was born. Whilst he has grand ambitions of a shop, for now I have had to content him with a website, but it’s a pretty awesome site he’s put together (with a bit of help from his old dad). Having researched the comic industry, we realised we had to become an official distributer and went through the logistics of setting that up. Cillian researches all of the upcoming comics and puts in orders for what he thinks will sell, although we’re able to take pre-orders for anything coming up. He recently branched out into also stocking Funko POP! collectibles and ran a stall at his school fair! His USP was to attract folks who may be new to reading comics and a bit intimidated, so he has an article on the front page to encourage folks to get started and he’s written multiple character bios to help people understand what they may like. He cross posts his bios along with reviews to Medium and he has r…
December 11, 2024 at 1:35 PM