Copy Fail (CVE-2026-31431) is severe enough that we wanted to create a patch ASAP.
If you run AlmaLinux on a multi-tenant host, container build farm, CI runner, or any system where untrusted users can get a shell, please read this blog post!
https://t.co/DN5GxavFT9
Almost 40 orgs just signed an open letter telling Google to reverse Android Developer Verification, we're one of them.
Google has not backed down and seems to have no intention of keeping Android open. Check out our newest video covering what's going on and what we can do: https://t.co/8Q2lN3micB
Open source makes the world go around!
In honor of FOSS month, our SIGs wanted to thank the projects we're relying on most.
There are a ton, so please enjoy this thread as we celebrate them all! 🙌
Google is planning to make #Android a closed platform. Users and developers need to resist and Competition Commissions need to keep an eye on this.
https://t.co/n6ko9L7J4m
#KeepAndroidOpen
🚨 Google wants to force every Android developer to register with them, even if you never touch the Play Store. We signed the open letter opposing this alongside EFF, Proton, F-Droid, Tor Project, and 30+ others. Android's openness is non-negotiable.
https://t.co/vzlPdOc5Sa
I saw a junior dev ship a feature in one afternoon.
Not “ship” like worked on it. Ship like: 8 PRs, 40+ files changed, green CI, merged.
Everyone clapped.
Then I reviewed the PR.
It was clean. It was fast. It was also… dangerous.
I asked one question: What happens if this endpoint gets called twice?
Silence.
The AI didn’t explain idempotency.
It didn’t explain race conditions.
It didn’t explain partial failures.
It didn’t explain money should never be “+=” without a ledger.
The PR looked like “progress”. But inside it was shrewd business logic:
- Hidden assumptions in “helper” functions
- Discounts applied before tax in one path, after tax in another
- Refund logic that worked but silently broke edge cases
- “Quick fixes” that changed meaning, not just code
- A boolean flag that became a policy decision
Writing PRs is easy now.
Merging PRs is easy now.
But reviewing intent is still hard.
Because the biggest bugs today aren’t syntax errors.
They’re business bugs that pass tests and leak money in production.
Gemini 3.0 just refactored my entire codebase in one call.
25 tool invocations. 3,000+ new lines. 12 brand new files.
It modularized everything. Broke up monoliths. Cleaned up spaghetti.
None of it worked.
But boy was it beautiful.