2 ms·
The biggest issue, is that the whole stack keeps being dependent on external nations, as per the companies that actually contribute to FOSS with big money. htt
by pjmlp 6mo ago
The biggest issue, is that the whole stack keeps being dependent on external nations, as per the companies that actually contribute to FOSS with big money.
https://insights.linuxfoundation.org/project/korg/contributors?timeRange=past365days&start=2025-05-13&end=2026-05-13&widget=organizations-leaderboard https://insights.linuxfoundation.org/project/korg/contributo...
Then it is Go (Google), Java (Oracle, IBM, Red-Hat), .NET (Microsoft), Rust (Amazon, Microsoft, Google), Typescript (Microsoft), C and C++ (Red-Hat, IBM, Microsoft, Apple Google, ...), and so on.
- kreco 6mo agoUsing a programming language is not the same as using a service. I can't seen any reason for this to be "the biggest issue".
- pjmlp 6mo agoAttack vectors and supply chain, every piece of the puzzle matters. There is no accident that folks like Oxide go through the trouble to control the whole stack, hardware, software, programming language toolchains they are using, only working with vendors that provide them every single documentation and customisation points they need. Unfortunely we lack an European Oxide.
- jeffrallen 6mo agoThey use Go and Rust. If Oxide thinks they can keep the supply chain risks of their langiage ecosystems under control, I think the rest of us can too.
- pjmlp 6mo agoYes, and are in the position of maintaining their own forks if needed, or doing reviews when updating them. Is everyone else?