4 ms·

Or a bad player buys them and over night removes all traces of certain projects. I still remember how e.g. MaxDB (former open source database) vanished.

• elcct 11y ago
  Or a bad player buys them and puts some nasty code in those libraries...
  • blfr 11y ago
    I downvoted you accidentally, sorry. Exactly, a bad player could do much more damage than simply turn the services off. A lot of the time there is no verification for the downloaded code. It's just being run.
    • pixl97 11y ago
      Yea, if someone at a nation state level manage to fake a cert and redirect BGP, I'm sure they could affect a huge number of systems pretty quickly. Do git clients even do a good job of SSL verification?
      • y4mi 11y ago
        afaik git doesnt do ssl verification. its supposedly being handled by either ssh or libcurl or are you talking about these frontends like source tree, smartgit, ... ?
      • ihsw 11y ago
        China briefly blocked GitHub (for whatever reason) and the tech establishment screamed bloody murder. I cannot even begin to imagine how it would react to it being MITM'd.
  • deleted 11y ago
    [deleted]
• kodablah 11y ago
  FoundationDB too. Cited specifically in the proposal slides behind GB [1]. 1 - https://getgb.io/rationale/ https://getgb.io/rationale/