How Open Source Maintainers Keep the Internet Running

Episode 8 of Open Source with Fexingo: Linux, GitHub, and Community-Driven Software Conversations. Lucas and Luna look at the unpaid security heroes behind the world's critical software. They focus on a specific case: the 2024 XZ Utils backdoor attempt, where a single volunteer maintainer caught a sophisticated supply-chain attack that could have compromised millions of Linux servers. The episode explores the structural problem of open-source maintenance—how projects like OpenSSL, Log4j, and XZ Utils are kept alive by a handful of overworked volunteers, the economics of corporate free-riding, and what the US Cybersecurity and Infrastructure Security Agency (CISA) is trying to do about it. Lucas and Luna also tie the conversation to listener support for independent software, including the show itself, without breaking the conversational flow. #OpenSource #Maintainers #XZUtils #SupplyChainSecurity #Linux #CISA #OpenSSL #Log4j #Burnout #VolunteerDevelopers #Cybersecurity #CommunityDriven #FreeRiding #Technology #FexingoBusiness #BusinessPodcast #OpenSourceWithFexingo #SoftwareSecurity Keep every episode free: buymeacoffee.com/fexingo