GitHub Shipped a Security Checklist. Why Aren't They The Defaults?

Links from the Episode

• DOP 356: Warehouse Robots Are a Distributed System
• DOP 357: What Is Spec-Driven Development?
• DOP 358: Just-in-Time Access for AI Agents
• Oracle sheds 21,000 roles over the past year amid wave of AI layoffs from tech giants
• CEO Ash Kulkarni's organizational announcement to Elastic employees
• Amazon launches $25B bond sale to fund AI infrastructure
• Linux Foundation extends DNS to AI agents with new Agent Name Service
• I automated my job (and it made me a better leader)
• Ex-GitHub chief's Entire opens distributed Git network for the AI agent era
• Microsoft is reportedly ditching OpenAI's and Anthropic's AI models in favor of its own to cut costs
• GPT-5.6 is now the preferred model in Microsoft 365 Copilot
• A backdoor in a LinkedIn job offer
• The New MCP Specification: What Security Teams Must Prepare For
• 6 security settings every GitHub maintainer should enable this week
• Autodesk commits $350 million to prepare the next generation for the AI jobs that design and make the physical world
• Backblaze Announces Five-Year Multi-Exabyte Data Storage Agreement with CoreWeave
• In-place pod restarts: Boosting efficiency and workload reliability in Kubernetes v1.35
• Announcing Amazon EKS Rollback for safe and reliable management of cluster upgrades
• Flux turns 10!
• Core dump epidemiology: fixing an 18-year-old bug
• A return to two-pizza culture
• JetBrains Engineering Hiring Process Guide
• Rebuilding the CircleCI CLI from scratch
• Software engineers in the 1960s
• Open Letter
• Announcing TypeScript 7.0
• Half-Life2 ... on the web
• instagui
• Infrastructure with AI Agents for Dummies
• How I Built a Server That Runs AI Agents 24/7 (Full Setup)
• Why I Let AI Agents Work the Night Shift