are you a programmer? do you like heavy metal? would you like to be *really upset* by a music video?
do i have something for you.
"Census III of Free and #OpenSource Software: Application Libraries leans on more than 12M data points from security tools such as Black Duck, FOSSA, Snyk, and Sonatype, which have been deployed at more than 10k companies"
https://techcrunch.com/2024/12/04/linux-foundation-report-highlights-the-true-state-of-open-source-libraries-in-production-apps/ #cybersecurity
2/ Regarding the #Linux 4.19.y EOL, see also this nice and interesting farewell note from @gregkh:
https://lore.kernel.org/all/2024120520-mashing-facing-6776@gregkh/
'"[#LinuxKernel 4.19] had a good life, despite being born out of internal strife. […]
As a "fun" proof that this one is finished […] , I looked at the "unfixed" CVEs from this #kernel release. Currently it is a list 983 CVEs long, too long to list here. […]"'
@ross If a distro is attempting to build and distribute a years-old version of XScreenSaver then it is my explicit goal to make life absolutely as difficult as possible for them.
In today’s news: man with zero self reflection goes on lengthy one sided rant highlighting just that.
#Linux 6.12 is out. For a list of new features see:
* This short LWN story: https://lwn.net/Articles/997958/ (screenshotted)
* Two detailed stories from LWN: https://lwn.net/Articles/990750/ & https://lwn.net/Articles/991301/
* The kernelnewbies page: https://kernelnewbies.org/Linux_6.12
See also the announcement from @torvalds:
https://lore.kernel.org/lkml/CAHk-=wgtGkHshfvaAe_O2ntnFBH3EprNk1juieLmjcF2HBwBgQ@mail.gmail.com/
'"No strange surprises this last week, so we're sticking to the regular release schedule, and that obviously means that the merge window opens tomorrow."'
{sigh} Go home CodeQL, you are drunk…
int main(int argc, char *argv[])
Poorly documented function: fewer than 2% comments for a function of 129 lines.
Code in question is at: https://github.com/gregkh/usbutils/blob/master/lsusb.c#L3835 if people are curious. It’s as if the tool hasn’t seen C code before…