3 ms·
I feel like the world runs on several billion dollars with of insecure code, like GNU/Linux, Apache, OpenSSL, OpenSSH, etc. This code will last decades, and YC
by chubot 11y ago
I feel like the world runs on several billion dollars with of insecure code, like GNU/Linux, Apache, OpenSSL, OpenSSH, etc. This code will last decades, and YC startups in particular rely a lot on it.
It's not clear that the current processes for writing code and then patching security holes will bring us into the future. Powerful governments and companies are routinely hacked.
Can we move all this code to a secure future without rewriting it all?
On the other hand, there are existing efforts, like https://www.coreinfrastructure.org/ https://www.coreinfrastructure.org/
I'm not sure how well they are funded.
- Alex3917 11y agoIn addition to security stuff, it would also be good to see projects get funded that have the potential to save massive amounts of electricity. PyPy might be a good example of that.
- eldavido 11y agoI think the way the code is implemented and managed plays as a big a part as the code itself. Look at how many large-scale breaches are caused by weak wifi passwords and other dumb, correctable things. I made a comment to the same effect, I would like to see rigorous research on what causes breaches and highest-impact mitigation strategies.