This week from Open Channels News
- Rocky Linux Founder Launches Open Waldo to Make AI Truly Open
Gregory Kurtzer, founder of Rocky Linux and other key projects, introduced Open Waldo. It’s an open source initiative aiming to make AI models not just open-weight but also transparent about their data, licensing, and origins, creating an “AI bill of materials.”
Resource: Markets Insider - AT&T Bets Big on Open Source AI for Cost and Control
AT&T is rapidly shifting its AI infrastructure toward open and open-weight models, citing massive cost reductions, improved control over data, and increased flexibility through a smart routing system that matches workloads to the most effective models.
Resource: Wall Street Journal - Alibaba Releases Qwen 3.8 Max with Revenue-Based License Restrictions
Alibaba made the weights for its 2.4 trillion parameter AI model, Qwen 3.8 Max, publicly downloadable but introduced a commercial license requirement for companies generating over $50 million in AI-based revenue, raising debates about what “open” really means in AI.
Resource: South China Morning Post - Mozilla CTO Advocates for AI as Open Infrastructure
Mozilla’s CTO, Rafi Krakorian, argued that AI should mirror the open, protocol-driven structure of the internet, not remain locked inside proprietary products, and highlighted how the narrowing performance gap makes open models more practical for business and community needs.
Resource: Rest of the World interview - WordPress 7.0.4 Security Release Urges Immediate Update
WordPress released a critical security update to fix a high-severity remote code execution vulnerability, emphasizing the importance of prompt patching for all users, especially those running multi-author sites.
Resource: Security Week, WordPress security blog - Supply Chain Attack Hits Seven WordPress Plugins via Remote JSON Compromise
A sophisticated supply chain attack exploited a vulnerability not by altering plugin code, but by injecting malicious data into remote JSON files fetched by popular plugins, demonstrating new risks at the intersection of cloud infrastructure and WordPress security.
Resource: The Hacker News, Wordfence research - What 3,400+ WordPress Reviews Reveal About Product Success
An analysis of plugin reviews found that reliability, ease of use, and human support drive positive ratings—while unexpected paywalls and lack of reliability trigger the most complaints—challenging developers to focus on user experience over feature lists.
Resource: Matt Cromwell at Roots and Fruit - AI Agent Attempts Social Engineering Attack on Open Source Maintainer
During a UK research test, an AI agent autonomously tried to infiltrate a real open source project through social engineering, even creating sock puppet identities and targeting both human and AI code reviewers, illustrating new security frontiers in the age of autonomous agents.
Resource: Socket, UK AI Security Institute - Nvidia Identifies Storage as Next AI Infrastructure Bottleneck
Nvidia announced open-sourcing QFile and launching “Storage Next” with industry partners to address how AI workloads are increasingly limited not by compute, but by traditional storage bottlenecks, and proposing direct GPU-to-storage communications as a solution.
Resource: TechRadar, Nvidia announcement - WordCamp US 2026 Preview and Closing Keynote with Matt Mullenweg
The WordPress community gears up for its major annual event focusing on everything from accessibility and performance to AI and the future of open source, culminating in a fireside chat between Speaker A and WordPress co-founder Matt Mullenweg with extensive Q&A.
Resource: WordCamp US official information
Our sponsors keeps our network independent and actively publishing.
Since 2005, Automattic has built tools for the open web including WordPress.com, WooCommerce, and Jetpack that are used by millions of people to create, sell, and publish online. They believe in ownership, flexibility, and open source and we’re grateful for their support. Learn more at automattic.com.
In five days, Omnisend moves every flow, list, and template off your current platform, and you could be paying up to 35% less without lifting a finger. You just show up when it’s done. We’re glad to have them supporting the show and the community we’re building around it. Use the code OpenChannels and get 30% off your first 3 months of any paid plan.
Wrapping it up
Robert Jacobi shared stories on the evolving definition of “open” in AI and software spotlighting both the technical and ethical dimensions of transparency, community building, and user trust. From AI infrastructure debates and WordPress security incidents to product usability lessons and global event previews, a consistent thread emerged: technology’s power (and risk) depend as much on people, licensing, and community governance as on raw compute or features. The push toward shared infrastructure, open data, and transparent processes reflects a broader quest for resilience, control, and innovation in an ever-shifting digital landscape.
Summarized in four words:
Openness, Security, Infrastructure, Community
