Stephen Augustus (he/him)

OpenSSF Scorecard v5.6.0 and scorecard-action v2.5.0 are out! 🎉 This is the first Scorecard release since our hosted services (the weekly scans and the REST API) moved to AboutCode Foundation infra! If you use the GitHub Action, upgrade to v2.5.0! Scorecard v5.6.0: github.com/ossf/scoreca...

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

Same question, but for All Things Open in Raleigh 🤣

OH: "I hate databases... maybe it's a fear of commitment?"

Who's in Prague for Open Source Summit EU next week?

Get yourself some friends that you want to go buy an off-grid multi-house compound with in the middle of nowhere.

castling queenside for extra legroom

ICYMI: We dropped BonoboMock, a C++ mocking library, this week at @cppcon.bsky.social! www.bloomberg.com/company/stor...

what's everyone hacking on these days?

[discussing my workflow, in the style of Taken] ...but what I do have are a very particular set of /skills.

"Next time on Full Metal Alchemist..."

something, something software supply chain security cc: @mikeneeds.rest @mauilion.dev

Dear fellow New Yorkers, "Knicks in the requisite and appropriate number amount of games"!

to those we haven't had a full conversation with, "Hiiiiiiiiiiii".

Can't have a conflict of interest if you don't have interests!

...such a Phallic victory

It's such an honor to be published in @acmqueue.bsky.social!! In this article, Alyssa and I give you some insight into how we help to sustain #opensource ecosystems @bloomberg.com. Shoutouts to our friends @openssf.org and #CHAOSS for providing frameworks to make software safer!!

Temporal is now Stage 4 at TC39 🎂🎂🎂 Thanks to all the other champions of JavaScript's new date-time API. It has been a wild ride over many years! I wrote a blog post explaining how we got here 📜 bloomberg.github.io/js-blog/post...

Source maps are a vital part of modern web development, but the lack of a standard made it impossible for us to add new features or improve the debugging experience. This is the story of how we standardized source maps and how we continue to ship features through standards 📜 🧵

Reposting this in honor of Slay the Spire 2 Early Access. Thank you for another hit, @megacrit.com!!!

girls night

Some time ago, @jonkuperman.com & @tchetwin.bsky.social had a dream for the JS engineers at Bloomberg to be more public about the cool JS work we have going on. That dream has come true - now we have a blog platform 🎉 (You'll see more articles over the next few days) bloomberg.github.io/js-blog/

[probably as a man] I know you're dying to say it, but I promise you that the devil has a sufficient amount of advocates. Literally no one wants or needs to hear you say this.

Kubernetes WIG Docs first meeting of 2026!!! cc: The Right Honorable @natali.rip

happy penultimate day to choose your annual $BRAND loyalty rewards and/or FSA speedrun day, to those who celebrate

chilling is underrated

The lion the with and the wardrobe can suck it. The magicians nephew is the real one

absolutely bodied by Google photos wrapped. just "damn bitch you don't do anything but travel and eat, here's all the fancy food you shoveled into your fat hog mouth this year" cc fellow bougie big back @auggie.dev

Still over here appreciating my girlfriend who got me a Cameo from Ice-T for Christmas (because we watch a lot of SVU together 🥺🥺🥺)

On my way to #OSSummit Japan! Who else is attending?