TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Know, Prevent, Fix: A framework for vulnerabilities in open source

2 点作者 pquerna超过 4 年前

1 comment

pquerna超过 4 年前
There are some mundane, and totally fine goals in here.<p>But midway through, there is some really broad and overreaching concepts.<p>When the goal is &quot;No Unilateral Changes to Critical Software&quot;, this implies that there is &quot;one&quot; way to run an open source community. I&#x27;m not saying its a bad idea, its just that its weird for Google to &quot;mandate&quot; it just because a project is popular and therefore critical.<p>And then there is the big one, &quot;Authentication for Participants in Critical Software&quot; -- ie, you can&#x27;t be anonymous to contribute to an open source project.