<p>I think the <a href="https://cosocial.ca/tags/xz" class="mention hashtag" rel="tag">#<span>xz</span></a> incident is teaching us that our infrastructure is dangerously fragile in the face of well-organized/funded attackers. The response isn’t “try harder” or “donate to your OSS project”, it needs to be institutional, professional, and at scale. </p><p>So, here’s my proposal, called “OSQI”, aimed at starting a how-to discussion: <a href="https://www.tbray.org/ongoing/When/202x/2024/04/01/OSQI" target="_blank" rel="nofollow noopener noreferrer" translate="no"><span class="invisible">https://www.</span><span class="ellipsis">tbray.org/ongoing/When/202x/20</span><span class="invisible">24/04/01/OSQI</span></a></p>

Reminder to not fedpost, especially not DIRECTLY AT THE PRESIDENT OF THE UNITED STATES. I AM MORE RELIEVED THAN EVER THAT I MADE THIS AN EXPLICIT RULE NOW

listen you all need to follow me back again over here cc @ElDeadKennedy@shitposter.club

<p><span class="h-card" translate="no"><a href="https://fosstodon.org/@kev" class="u-url mention">@<span>kev</span></a></span> who’s a naughty boy then 👏</p>

@vriska@lizards.live this is a very vaartisesque post

<p><span class="h-card" translate="no"><a href="https://mathstodon.xyz/@markusde" class="u-url mention">@<span>markusde</span></a></span> i&#39;m doing this youth protection training for the third time this year because they keep assigning it to me and don&#39;t have a system in place that says &quot;oh she did this a couple months back&quot;</p>

<p><span class="h-card" translate="no"><a href="https://types.pl/@bhaktishh" class="u-url mention">@<span>bhaktishh</span></a></span> at NYU we are required to do 2/8 hours of training but different people have different subsets of the 8 so they actually just make everyone do all 8</p>