Jason Meller wrote a security rulebook. I read it. He is in direct violation of it.
As CEO of Kolide, Meller published honest.security and reduced it to five tenets on December 8, 2020.
The first: “The values your organization stands behind should be well-represented in your security program.” That’s politics at work. The third holds that trust is demonstrated through informed consent and transparency. The fifth holds that people make rational decisions about risk when they are educated and honestly motivated. Then 1Password, whose 2021 round was joined personally by Shopify’s Tobi Lütke and Harley Finkelstein, the executives who platformed Nazi merchandise and seated David Heinemeier Hansson (DHH) on their board, bought Kolide in February 2024, made Meller VP of Product, and still publishes the document as the guiding principles of its Device Trust product.
Houston, we have a problem.
DHH published his infamous Nazi screed called “As I remember London” on September 15, 2025. The post mourns a London no longer full of “native” British and approves a right-wing Tommy Robinson march promoting white supremacy. That was his launch, and then came his landing the following July.
Meller answered the criticism of DHH on September 26 with a photo of a child in a dance costume, back turned to the camera, at the edge of a lifeless/closed private pool. With that he boasted he became a multi-millionaire thanks to Rails, DHH, and the company DHH keeps: “Let’s ignore the noise and keep building.”
He posted that as a director of the Rails Foundation, which DHH chairs. 1Password had taken a board seat in 2024 and Meller filled it with his “values”.
On July 12, 2026, DHH published “The will to power will return.” He tries to gin up a “loss” narrative to evoke FUD, claiming the West has lost its will, weak men have made hard times, a hero generation will end the managed decline, and the last such Crisis ended in total war, so do not bet against another. That title is Nietzsche’s phrase fraudulently repackaged by his antisemitic sister Elisabeth Förster-Nietzsche: she made a posthumous compilation cut from his notebooks into a racist doctrine of strength over weakness, which was adopted by the Nazis. It has been treated by scholars as hers rather than the philosopher’s since the Colli-Montinari edition. This isn’t obscure history. Hitler ran PR at her Weimar archive in 1934, photographed at the door taking her hands, and photographed inside contemplating the bust of her brother.
Days later DHH published the word remigration, Martin Sellner’s Potsdam term for forced deportation of settled populations, documented here at the time.
On July 21, 2026, DHH doubled-down on the Nazism with “Wolves, sheep, and gypsies.” He describes Romani people in Copenhagen parks beside a wolf population and states the remedy for one is shooting and the remedy for the other is deportation. Make no mistake. DHH pushes the dehumanization of an ethnic group in preparation for its removal on force of death. It is the rhetoric that preceded the Porajmos. DHH then complained publicly when Claude refused to translate his Nazi propaganda into Italian.
On August 31, 2026, DHH named 1Password a Distinguished Corporate Patron of his Omacom Foundation, $100,000 a year for three years, in a quid pro quo he described the same afternoon as proof open source need not be a “commune.”
This dog-whistle invokes Nazi anti-communism, an antisemitic project from the start: the NSDAP fused Jews and the labor movement into one enemy, “Jewish Bolshevism,” and Rosenberg’s 1936 Nuremberg speech made the equation explicit. Seven weeks after the will-to-power essay, DHH reached for the commune as his enemy image on the day he took 1Password’s money.
1Password is the first corporate patron he does not own, and the independence ends there. Lütke, on 1Password’s cap table since 2021, pledged $1 million on August 21. His portfolio company followed in ten days. The quid was the default install slot 1Password had held since Omakub. DHH thanked Meller by name for leading it.
Meller had already explained the bond the evening before: DHH pitched him one-on-one for two hours, and he switched to Mac for Rails and DHH seventeen years ago and is switching platforms again for him now.
Then he called DHH’s past year a masterclass in force of will. Nine days before the deportation post, DHH’s own headline had announced the return of the will to power. The phrase is his patron’s, seven weeks on.
On August 31 Meller produced the metric that became the company’s defense: Omarchy is the third largest Linux distribution among active 1Password users and first on weekends. DHH called it crazy. A fan called it his cocaine energy. You know, weekend stuff.
When employees and customers objected, this data point was cited. CEO David Faugno told staff the money goes to a foundation and not a person (e.g. to a NSDAP not to Hitler himself), that 1Password rejects DHH’s exclusionary views, and that Omarchy is a top Linux platform for its users. Cofounder Roustem Karimov, in a Slack message obtained by The Verge, accused objecting staff of trying to setup a moral monopoly and ostracizing colleagues by rejecting Nazism.
Now back to those tenets.
Tenet one. Values the organization stands behind, represented in the security program. The CEO says the company rejects DHH’s views. The VP of Product funds them, celebrates them, and sits on a board DHH chairs. One of those is the value the organization stands behind. The money identifies which.
Tenet three. Trust through informed consent and transparency. The pledge was announced by DHH, on DHH’s platform, with the objections handled afterward in private Slack. Employees learned of the affiliation the way everyone else did. Consent was never sought. Transparency arrived through a leak.
Tenet five. People make rational decisions when educated and honestly motivated. The employees and customers who objected read the two posts and decided. Meller’s word for that decision in 2025 was noise. Karimov’s word in 2026 was moral monopoly. The doctrine says respect the informed decision. The practice says discredit it.
Meller’s method is the same on both dates. He never engages the text. He recodes the objection as noise or as shots taken, then answers with a number: his net worth in 2025, weekend install counts in 2026. Honest Security was written against exactly that move. Its whole argument is that a security team which answers human objections with telemetry has already lost.
Every director of the Rails Foundation, every patron of Omacom, and every executive at 1Password now owns Nazi propaganda.
But Meller is different from everyone, because that guy owns them twice. He brokered the money and he wrote a standard that says Meller can’t be trusted.
