Remote

Max Mehl

@mxmehl@mastodon.social

mastodon 4.8.0-nightly.2026-10-06

Open Sourcerer 🧙‍♂️ Free Software advocate 💪
Casting profane magic at DB Systel (Deutsche Bahn). Board member @fsfe@mastodon.social, @openrail@floss.social Team, formerly @fdroidorg@floss.social board. REUSE.software evangelist.
Posts in EN & DE.

993 Followers

163 Following

20 Posts

Joined June 26, 2018

🌍 Website:

https://mehl.mx

📨 Contact:

https://mehl.mx/contact

🎤 Opinions:

My own, not my affiliations'

⚧️ Pronouns:

he/him

Max Mehl @mxmehl@mastodon.social

· 3mo ago

Vielleicht sollte ich hier beim aktuell stattfindenden #Hack4Rail in Wien bei den Kolleg:innen nochmal nachhaken, ob jemand an einer Challenge zu Funkmasten arbeitet, und versehentlich die Produktivschnittstelle verwendet hat.

https://www.zeit.de/mobilitaet/2026-06/meldungen-ueber-grossflaechige-stoerung-im-bahnverkehr

mastodon.social

10

0

2

0

Max Mehl @mxmehl@mastodon.social

· 8mo ago

At #FOSDEM and want to learn how a large organization such as #DeutscheBahn is getting ready for the #CRA by making its software supply chain transparent with #SBOM?

Join my talk today (15:05) on the strategy we've set up: https://fosdem.org/2026/schedule/event/ZSWH3N-deutsche-bahn-supply-chain-cra-strategy/

...and tomorrow (12:00) with an emphasis on the tooling we're using: https://fosdem.org/2026/schedule/event/7EYTRJ-deutsche-bahn-large-scale-sbom-approach/

I offer facts and diagrams. I seek questions and feedback.

mastodon.social

Mastodon

18

0

8

0

Max Mehl @mxmehl@mastodon.social

· 3mo ago

RE: @openrail@floss.social

Join us at 14:00 CEST tomorrow to learn about new exciting #OpenSource projects in the #railways space 🚅

2

0

0

0

Max Mehl @mxmehl@mastodon.social

· 6mo ago

Today at 10:00 @ #FOSSbackstage, my colleague @cschum@mastodon.social and I are going to talk about "getting real with the supply chain". The session will be about how the #OSPO at #DeutscheBahn generates actionable insights from vast data and navigates the triangle of risk/value/people.

mastodon.social

8

0

3

0

Max Mehl @mxmehl@mastodon.social

· 4mo ago

A strangely satisfying benefit of being on vacation is that I have some spare time to prove people wrong on the internet.

3

0

1

0

Max Mehl @mxmehl@mastodon.social

· 7mo ago

Ist das noch kreative Guerillawerbung oder schon peinliche Anbiederung an jugendliche Kundschaft? #Wero

mastodon.social

Mastodon

4

0

2

0

Max Mehl @mxmehl@mastodon.social

· 7mo ago

Replying to

Actually, there were two presentations at #FOSDEM. In the first, I focused on the strategic aspects and context of the Cyber Resilience Act (#CRA). Why does DB need transparency of its software supply chains? Why is it damn hard to achieve this? How did we come from idea to strategy to implementation? And why do we need less a technological and rather an organizational and cultural shift to succeed? Answers to these questions in the recording and slides. https://mehl.mx/blog/2026/software-supply-chain-strategy-at-deutsche-bahn/ [🧵 2/3]

4

1

2

0

Max Mehl @mxmehl@mastodon.social

· 7mo ago

Replying to

The second presentation overlapped slightly with the first, but emphasized the tooling aspect: • #SBOM lifecycle and blueprint • Our modular SBOM toolchain for generation, refinement, analysis and storage • Integration into DevOps workflows • Our central compliance portal for teams and governance owners • And how we delight our various users. This is all heavily based on many great #OpenSource projects, such as those by @anchore@mstdn.business and @homebrew@fosstodon.org. https://mehl.mx/blog/2026/deutsche-bahns-approach-to-large-scale-sbom-collection-and-use/ [🧵 3/3]

4

0

2

0

Max Mehl @mxmehl@mastodon.social

· 7mo ago

RE: @finnmyrstad@eupolicy.social

This video is pure gold just because it makes you laugh about something that is depressingly true.

#enshittification

eupolicy.social

Finn Lützow-Holm Myrstad: "❓Have you noticed that digital products and servi…" - EUpolicy.social - A Mastodon server for the EU bubble

4

0

0

0

Max Mehl @mxmehl@mastodon.social

· 5mo ago

Eben im Bordbistro, Kundin zum Kollegen hinter der Theke:

Sie: "Do you speak English?"
Er: "Yes. And you?"

2

0

0

0

Max Mehl @mxmehl@mastodon.social

· 5mo ago

Replying to

@T_X@chaos.social @fsfe@mastodon.social @EUCommission@ec.social-network.europa.eu The incompatibility with GPLv3 is very clear, caused by the provisions around anti-tivoization for example. Till Jaeger found evidence that GPLv2 may also be problematic depending on the interpretation, but it's less obvious.

1

0

1

0

Max Mehl @mxmehl@mastodon.social

· 8mo ago

@slothrop@chaos.social Did you mean: house burping

2

0

0

0

Max Mehl @mxmehl@mastodon.social

· 6mo ago

Replying to

@adulau And it's made worse by the fact that BSL as an identifier is actually describing another license (boost software license, OSI approved), which is why the Business Source License has been given the SPDX ID BUSL. More than once I had people coming to me saying that Business Source License isn't as issue because BSL is marked as OSI approved on the SPDX license list 🙄

1

0

1

0

Max Mehl @mxmehl@mastodon.social

· 6mo ago

RE: @gnulinux@social.anoxinon.de

Beim GNU/Linux-Podcast spreche ich über Software-Lieferketten, SBOMs u.v.m. im Kontext der Deutschen Bahn. Also nicht nur, was das ist, sondern wie wir damit auch sinnvoll umgehen können und was das mit Engagement in Open-Source-Projekten zu tun hat.

#DeutscheBahn #CRA #SBOM #SupplyChain #Podcast

social.anoxinon.de

1

0

0

0

Max Mehl @mxmehl@mastodon.social

· 71mo ago

Replying to

@dino Nice! The only thing that's still better in Gajim from a XFCE user perspective is systray/background support. I don't always want the window open or in my panel. These issues also have a lot of upvotes BTW 😜

2

0

0

0

Max Mehl @mxmehl@mastodon.social

· 7mo ago

TIL my ΔEₒₖ JND is 0.0036 (and what that actually means). Apparently this is quite good. Can you beat it? https://www.keithcirkel.co.uk/whats-my-jnd/?r=AWwgKP__v8vD

keithcirkel.co.uk

0

0

0

0

Max Mehl @mxmehl@mastodon.social

· 7mo ago

Replying to

@kde FYI, copyright of this image is @fsfe, original source here: https://fsfe.org/activities/ilovefs/whylovefs/gallery.html

FSFE - Free Software Foundation Europe

I ♥ Free Software - Gallery - FSFE

A picture is worth a thousand words and describing love with letters is much harder than with images. On this page we collect some examples of people from ...

0

0

0

0

Max Mehl @mxmehl@mastodon.social

· 2mo ago

@hallo@uberspace.social Ich habe vor ~1 Woche einen neuen Guide für das Lab vorgeschlagen (CastMail2List). Wie lange dauert es so circa, bis ein Review stattfindet? Oder muss ich das aktiv irgendwo anfragen? Habe dazu leider nichts in der Docu gefunden.

0

1

0

0

Max Mehl @mxmehl@mastodon.social

· 27mo ago

Replying to

@filippo@abyssdomain.expert Congratulations on this big step! It reads like a professional, maintainer-friendly setup. You surely also looked at existing groups for maintainers, e.g. Tidelift. May I ask why you opted for founding an own organization?

0

0

0

0