TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Know, Prevent, Fix: A framework for vulnerabilities in open source

2 pointsby pquernaover 4 years ago

1 comment

pquernaover 4 years ago
There are some mundane, and totally fine goals in here.<p>But midway through, there is some really broad and overreaching concepts.<p>When the goal is &quot;No Unilateral Changes to Critical Software&quot;, this implies that there is &quot;one&quot; way to run an open source community. I&#x27;m not saying its a bad idea, its just that its weird for Google to &quot;mandate&quot; it just because a project is popular and therefore critical.<p>And then there is the big one, &quot;Authentication for Participants in Critical Software&quot; -- ie, you can&#x27;t be anonymous to contribute to an open source project.