From Fairy Dust to Glasswing: The 12-Year Collapse of the Open-Source Social Contract

Join us for a comprehensive deep dive into the structural rot of our digital infrastructure, guided by John Menerick’s "Project Butterfly of Damocles" series. We trace the fragile history of the internet from 2014 to 2026, starting with the chilling DEF CON 22 data that exposed tens of thousands of critical flaws in foundational tools like Exim and OpenSSL.This episode unpacks the dangerous myth of "fairy dust"—the idea that open-source code is secure simply because "many eyes" are looking at it—and how it has continuously moved up the technology stack. We break down how nation-states weaponized this vulnerability in CI/CD pipelines with tools like Trivy, and how those exact same flaws are now embedded in our machine learning infrastructure, from TensorFlow to HuggingFace. Finally, discover Anthropic's Project Glasswing, an AI capable of finding 27-year-old zero-day bugs, and confront the terrifying new bottleneck: we can now discover vulnerabilities at machine speed, but we are still relying on exhausted, unpaid volunteers to patch them at human speed.