3 ms·
If you're suggesting that discovery of a bug in a popular open source project holds the discoverer up to a moral responsibility of reporting it -- well then, ma
by i_have_to_speak 10y ago
If you're suggesting that discovery of a bug in a popular open source project holds the discoverer up to a moral responsibility of reporting it -- well then, maybe you are guilty too!
- rcthompson 10y agoThere's no obligation to report a bug you've found, of course. But if you've taken the time to write a blog post about it, one would hope you've also taken the time to directly notify the software authors as well.
- i_have_to_speak 10y agoBut if you hadn't taken as much time -- say you've only come across a well written blog post clearly describing the bug -- would you report it?
- 0xmohit 10y agoGiven (1) the blog post, (2) the author posted the blog link on HN, I assumed that the bugs would have reported upstream. If it were a blog describing a 0-day vulnerability in a given software, I wouldn't have assumed that it would have been reported.