Sign in

Eddie Knight

@eddieknight.dev
396 followers 198 following 484 posts

Securing open source software is good for everyone. FINOS TOC; OpenSSF Baseline; CNCF TAG Security & Compliance

PostsRepliesMedia
Eddie Knight @eddieknight.dev · 16/06/2025
It's been a year since we first decided we were going to create the Open Source Project Security Baseline — and it's been a wild ride. I'll be talking about it during a #OSSummit keynote on Wednesday, but beforehand... let's hang out and celebrate a bit! www.sonatype.com/event/baseli...
041
Eddie Knight @eddieknight.dev · 13/06/2025
This is one talk you should absolutely skip
010
Eddie Knight @eddieknight.dev · 12/06/2025
Interestingly, CloudFlare is getting 2x the reports compared to the others I clicked into.
000
Eddie Knight @eddieknight.dev · 12/06/2025
Anyone have an explanation for this downtime spike? Reports simultaneously from GCP and AWS, so that's ruled out. Heatmap from different report pages has major cities reporting from every US region.
210
Eddie Knight @eddieknight.dev · 09/06/2025
Graphs always have a way of reminding me that we literally cannot comprehend what our ancestors were thinking, feeling, experiencing in their lifetimes. Even such a core human element as "a parent's love" would have different meaning if the context is that 2 in 5 kids die before kindergarten.
020
Eddie Knight @eddieknight.dev · 09/05/2025
relevant:
010
Eddie Knight @eddieknight.dev · 17/04/2025
Apparently I need to start putting content on my personal website, if ChatGPT is gonna send people to it... Dislike.
020
Eddie Knight @eddieknight.dev · 15/04/2025
Now we've lost funding for the common vulnerabilities & exposures system that the entire cybersecurity industry relies on. gg, well played.
letter from Yosry Barsoum notifying the CVE governing board that it no longer has government funding.
030
Eddie Knight @eddieknight.dev · 14/04/2025
This is it, @mikeneeds.rest. The high water mark. The peak. The climax. The apex. It only goes down from here.
Average Score in the session feedback: 10 out of 10.
031
Eddie Knight @eddieknight.dev · 10/04/2025
Litmus test... Share your opinions on this:
A physical notebook with the text:

"Password Book: Internet Password Logbook"
"Never forget a password again!"
"Store usernames, passwords, & web addresses"
100
Eddie Knight @eddieknight.dev · 07/04/2025
When the HOA comes to explain why your new mailbox isn't up to code, and why it's very very important that all the mailboxes match.
(this is actually just a picture of me and Mike giving our talk a couple days ago)
021
Eddie Knight @eddieknight.dev · 29/03/2025
ICYMI: We have four security workshops on the KubeCon next week! It'll be less than 5min of me introducing projects and maintainers, then 40min of hands-on time with the project's maintainers. And we have 4 LEGO Star wars prizes for Impact Contributors! kccnceu2025.sched.com/type/Experie...
see the attached link for detailed times and locations
141
Eddie Knight @eddieknight.dev · 22/03/2025
First time seeing this go mod security feature catch something, and it feels... incorrect. This taxes my imagination to think of how it would be malicious OR accidental. Why does this kind of thing only happen when I'm too sleepy to dig in and figure it out 😑
checksum mismatch security error flagged by 'go mod tidy' — but the checksums are nearly identical. only a single letter differs in capitalization. how is that possible?
110
Eddie Knight @eddieknight.dev · 05/03/2025
For the uninitiated...
"In 2007, Steven Molaro experimented with Domino's online ordering system by requesting a pizza with no sauce, no cheese, and beef only on the left side. The result was a mostly bare crust with beef on one half, leading to the meme."
010
Eddie Knight @eddieknight.dev · 01/03/2025
Terraform + Ansible = Terr_____ + ___ible ?
051
Eddie Knight @eddieknight.dev · 28/02/2025
I can help if you're a DOD warehouse manager who is being asked to go around tapping folks on the shoulder to help them find their login and send the DOGE email. Here's your template: - unloaded boxes - put boxes on shelves - moved boxes from shelves to other boxes - labeled boxes - loaded boxes
Title: "MEMORANDUM FOR ALL DEPARTMENT OF DEFENSE CIVILIAN EMPLOYEES"
Text snippet: "Managers of those who do not regularly work in office settings with access to email, e.g. warehouses and shipyards, should address directly with their employees."
110
Eddie Knight @eddieknight.dev · 30/01/2025
That's rough, buddy
011
Eddie Knight @eddieknight.dev · 17/01/2025
I don't have many internal meetings with colleagues, but every week I have a TON of collaborations with folks from all sorts of organizations all around the world. If it wasn't for cal.com/knight, I would need a personal assistant— or a different job entirely.
010
Eddie Knight @eddieknight.dev · 08/01/2025
A job opening was just shared where you could work in a high impact security role alongside some of my favorite people in open source. jobs.citi.com/job/irving/c...
000
Eddie Knight @eddieknight.dev · 08/01/2025
I'm confused about how to feel. I got my first ever KubeCon acceptance on the same day that I saw my name on the program beside these heavy hitters. 100% Excited 100% Imposter
051
Eddie Knight @eddieknight.dev · 03/01/2025
This is what happened to the Library of Alexandria! The problem wasn't that the building was destroyed— but maintenance slowly ceased and the knowledge it provided was used less and less, with potentially nothing usable remaining inside, until it became just another building destroyed in war.
from https://en.wikipedia.org/wiki/Library_of_Alexandria

The Library dwindled during the Roman period, from a lack of funding and support. Its membership appears to have ceased by the 260s AD. Between 270 and 275 AD, Alexandria saw a Palmyrene invasion and an imperial counterattack that probably destroyed whatever remained of the Library, if it still existed.
0624
Eddie Knight @eddieknight.dev · 02/01/2025
no highly esteemed deed is commemorated here
contribution grid from https://github.com/eddie-knight
120
Eddie Knight @eddieknight.dev · 29/12/2024
I watched as thousands of these things (but gold) were filled, sealed, and loaded into trucks every day for months. Then January hit and the entire facility closed down overnight.
a group of empty #10 cans used for bulk food storage
000
Eddie Knight @eddieknight.dev · 19/12/2024
Profile picture checks out
130
Eddie Knight @eddieknight.dev · 11/12/2024
If you're a fan of comics— or good people doing awesome things— Check this out. fisks.co
From Matt Bain:

So, earlier in the summer my family got some pretty terrible news, when my eldest son was diagnosed with Leukaemia. As you can imagine it’s been a bit of a rollercoaster since then. 

My son’s name is Cillian and since his diagnosis back in July he’s had to spend over six weeks in hospital, two months hooked up to a continuous IV that he had to carry around with him and has spent countless more days receiving treatment in hospital, school and home and throughout it all he’s been a rock star. He missed a scout trip to America and the various holidays and trips we had planned and his summer turned into a pretty depressing time.

One of the things that Cillian loves is comics and he was fortunate that a number of family members bought him some to read whilst he was in hospital and receiving treatment, some of them far more than is good for them or him! However, whilst sitting in hospital one night chatting, Cillian told me he wanted to do something with all the time he now had on his hands and that was to start a comic book store.

This is how https://fisks.co/ was born. 

Whilst he has grand ambitions of a shop, for now I have had to content him with a website, but it’s a pretty awesome site he’s put together (with a bit of help from his old dad). Having researched the comic industry, we realised we had to become an official distributer and went through the logistics of setting that up. 

Cillian researches all of the upcoming comics and puts in orders for what he thinks will sell, although we’re able to take pre-orders for anything coming up. He recently branched out into also stocking Funko POP! collectibles and ran a stall at his school fair!

His USP was to attract folks who may be new to reading comics and a bit intimidated, so he has an article on the front page to encourage folks to get started and he’s written multiple character bios to help people understand what they may like. He cross posts his bios along with reviews to Medium and he has r…
010
Eddie Knight @eddieknight.dev · 01/12/2024
This is as roasted as my last attempt at a thanksgiving turkey.
Failed roast... "Eddie's feed is like a tech conference where the jokes are as abundant as the job postings."
110
Eddie Knight @eddieknight.dev · 30/11/2024
😳
terrifying AI generated blob hand
030
Eddie Knight @eddieknight.dev · 30/11/2024
I'm more concerned about this. Not sure your DeverPel guy is gonna be around much longer.
terrifying AI generated hand blob thing
010
Eddie Knight @eddieknight.dev · 30/11/2024
Don't forget it: "Software engineering is not the same thing as coding"
From Jeremy Manson: "Someone is on X saying that they research software engineering productivity at Stanford, have looked at a bunch of companies' GitHub repos, and that the 9.5% of engineers (by his count) who have access to their company's GitHub repo and aren't committing to it are "ghost engineers" who should be fired.

Sigh. Speaking as an erstwhile manager, we tend to notice if engineers need to make code commits and don't. Are the 9.5% the senior engineers and managers who are all busy writing docs and making presentations and designing the systems and evaluating other people's work, by any chance? Maybe the odd project or program manager who wants to track what's happening and needs to get cc'd on the issues?

Software engineering is not the same thing as coding, which is a fact that only becomes more true as you gain more seniority."
220
Eddie Knight @eddieknight.dev · 25/11/2024
💯 A "conversational full stop" is a type of phrase that is intended to end further discussion or remove the speaker from the discourse. These types of phrases have no place in a productive environment.
011
Eddie Knight @eddieknight.dev · 25/11/2024
Senior Software Engineer role just opened up over at Notion! www.notion.so/Senior-Softw...
From Dr. Claire Knight:

Hey folks! I'm hiring 🎉

Come and work with me and a fantastic team at Odin to help build out our platform. As a seed stage company there is still a lot to do and lots of scope for impact. But we already have customers and revenue. Not always the case in the early days.

Please: no agencies or recruiters. We are doing this in house and I have an awesome talent partner.
000
Eddie Knight @eddieknight.dev · 23/11/2024
It'll be competitive, but I highly recommend applying for these positions posted by @sublimi.no if you have right to work in UK/EU control-plane.io/working-here/ job-boards.eu.greenhouse.io/controlplane
Image quote from Andrew Martin: "We are hiring! ⚡ K8s and Cloud Native principal, senior, and consultant engineers/DevOps, security engineers/architects, red/blue teamers — we have lots of positions open ✨☸️ Kind people and interesting work, always cloud native, always secure 😊🙏 Come and talk to us at Kubernetes Community Days UK or DevSecCon Global Community this week, or reach out to anybody at ControlPlane to understand what we do."
022
Eddie Knight @eddieknight.dev · 20/11/2024
Here's what I did:
030
Eddie Knight @eddieknight.dev · 14/11/2024
Everybody's all hot on the AT protocol until it gets used to support imperial ground operations
AT-AT
010
Eddie Knight @eddieknight.dev · 08/11/2024
This number has been doubling every year for several years, and this year it's 2.5x! Seems someone is burning the midnight GPU at both ends.
000
Eddie Knight @eddieknight.dev · 04/11/2024
Auto-generating things is awesome @puerco.mx @avi.press @rachelhandley.bsky.social @kelseyhightower.com @justingarrison.com @ilkka.turunen.dev @sublimi.no @rickandwrite.bsky.social @crabtalesmagazine.bsky.social @jerdog.dev @onlydole.dev @rohanoduill.bsky.social @0x0.boo @danabra.mov @lookitup.baby
070
Eddie Knight @eddieknight.dev · 04/11/2024
Just finished my annual Sonatype OSPO report, and— while tedious— it was really cool to reflect on all the ways we've impacted the community AND our company in the past year.
OSPO Report Table of Contents
020
Eddie Knight @eddieknight.dev · 02/11/2024
mountain mountain mountain
020
Eddie Knight @eddieknight.dev · 01/11/2024
My last tweet 😆
31447
Eddie Knight @eddieknight.dev · 01/11/2024
I was lucky enough to write the foreword for this LF+CNCF report after tearing into a pre-release version. Among other points, it talks about survivor bias with the classic diagram of the bullet-riddled bomber as an analogy for cybersecurity. Winning. www.linuxfoundation.org/research/clo...
2024 Cloud Native Security Report cover
000
Eddie Knight @eddieknight.dev · 28/10/2024
Can we please all go back to sequence diagrams for explanations? This is just *chef's kiss* the right way to make a point. strategizeyourcareer.com/p/my-strateg...
010
Eddie Knight @eddieknight.dev · 28/10/2024
Been looking forward to this one... Minder is the newest OpenSSF project, enabling "developers and security teams to adopt a policy-based approach to open source software security." 🎉 openssf.org/blog/2024/10...
131