Vouch for an open source web of trust (News)

单集文稿 ...

• 00:05

  What up nerds?

• 00:07

  I'm Jared and this is Change Log News for the week of Monday, February 9th, 2026.

• 00:14

  So the folks at ai.com apparently spent 70 million on the domain,

• 00:19

  then another 15 million on a Super Bowl ad, then failed to prepare for the resulting flood.

• 00:26

  The end result?

• 00:27

  One of the most expensive,

• 00:29

  self-inflicted DDoS attacks in tech history and free advertising for Cloudflare's standard gateway timeout page.

• 00:37

  Yikes.

• 00:38

  Okay, let's get into this week's news.

• 00:41

  Vouch for an open source web of trust.

• 00:44

  Here's ghosty creator Mitchell Hashimoto, quote,

• 00:48

  AI eliminated the natural barrier to entry that let OSS projects trust by default.

• 00:54

  People told me to do something rather than just complain, so I did.

• 00:58

  Introducing vouch, explicit trust management for open source,

• 01:02

  trusted people, vouch for others, end quote.

• 01:05

  The idea is simple and it mimics real life social constructs,

• 01:08

  so I think it has a chance of succeeding, quote.

• 01:11

  Unvouched users can't contribute to your projects.

• 01:14

  Very bad users can be explicitly denounced, effectively blocked.

• 01:18

  Users are vouched or denounced by contributors via GitHub issue or discussion comments or via the CLI.

• 全部文稿