- We ❤️ Open Source
- Posts
- Patch everything, continuously?
Patch everything, continuously?
Most security teams think patch management starts when a vulnerability is disclosed. It doesn't. This week we dig into how AI-speed threats have quietly rewritten the rules and what the new baseline actually looks like. We're also exploring the AI career advantage that runs deeper than saving time in Part 2 of our State of Tech and AI Jobs series, discovering an open source app that turns piano practice into something closer to a game, and finally settling why your 1 TB drive shows up as 930 GB.
On the podcast, a Flox engineer breaks down why matching CUDA drivers is finally easier, why he sees AI changing how developers learn rather than replacing them, and offers a refreshingly even-handed take on the HashiCorp and OpenTofu split. This is edition #79 of the We ❤️ Open Source newsletter. Made and curated by Jason & Todd.🙂
This week we'll look at...
Fine-Tune Your First Open Source Model
Join us next Tuesday, September 8 at Fidelity Investment’s RTP campus
Our next in-person meetup will take place next Tuesday evening, September 8! Fidelity Investments will be the venue host for the final meetup before All Things Open 2026, so move quickly and RSVP as we'll have to cut off registrations due to capacity limits. We're proudly hosting this one in partnership with Randstad Digital powered by Torc.
Articles
 | Most security teams think patch management starts when a vulnerability is disclosed. It doesn't. AI-speed threats have quietly made automation, SBOMs, and live patching the new baseline, and most teams haven't caught up yet. WHY WE ❤️ IT: You can't ignore the security mindset shift from "which CVE to patch" to "patch everything, continuously." |
 | Most people think AI helps your job search by saving time. The real advantage runs much deeper. Part 2 of The State of Tech and AI Jobs series explores AI governance, automated reasoning, and the value propositions most job seekers are leaving on the table. WHY WE ❤️ IT: Skip the efficiency arguments. This one gets into what AI can actually do for your career. |
 | A new piano and a years-long itch to play again led one writer down a software rabbit hole, from Ardour to GarageBand, before landing on PianoBooster. Free, GPLv3-licensed, and built specifically for learners, it turns practice into something closer to a game. Here's what the search (and the setup) looked like. WHY WE ❤️ IT: Open source software for relearning piano? Yes, that's a real category, and it strikes all the right keys. |
What's in your technology toolbox?
Ever wonder why your 1 TB drive shows up as 930 GB? Learn Linux TV breaks down the decades-old naming mixup behind it, the IEC convention that fixes it, and why "missing" storage was never actually missing at all.
WHY WE ❤️ IT: Because your hard drive was never lying to you, the units just were.
From the We ❤️ Open Source Podcast
 | Matching CUDA drivers to the right SDK version has wasted more developer hours than anyone likes to admit. A Flox engineer breaks down the fix, plus his take on why AI changes how developers learn rather than replacing them, and a refreshingly even-handed read on the HashiCorp and OpenTofu split. WHY WE ❤️ IT: He picks a side in exactly zero open source fights, and somehow makes that the interesting part. |
Featured podcast shorts
 |  |
Wrap Up
If you've made it this far (thank you!), check out everything we do, our YouTube channel with 1000's of open source talks, the many meetups we host around the southeast and NYC, the All Things AI spring event we co-host, and of course All Things Open, the largest open source tech conference on the US east coast.
We hope you learn something new this weekend!
How did you like the newsletter? |