3 ms·
The criminality is putting a program on the internet which you know is full of security holes. It's not legal for me to set up a shop selling known faulty elec
by CJefferson 9y ago
The criminality is putting a program on the internet which you know is full of security holes.
It's not legal for me to set up a shop selling known faulty electronics, or even give them away for free unless I make clear I know they are faulty. I wonder if this should be extended to tech.
I'm not saying they have to take the code down entirely, but they could pop a big warning on the download page at least. They are knowingly having thousands of downloads a day of software they have known is dangerously broken for over a year.
- lfam 9y agoPretty much all free and open source software licenses specifically say there is no warranty at all. All non-trivial software has security bugs. To reiterate, every program you've ever heard of has had and will have serious security bugs. If no bugs have been published, then either nobody is looking or someone is keeping them secret. I agree that Apache has behaved irresponsibly.
- votepaunchy 9y agoApache has a process for retiring inactive top-level and incubator projects. It's not immediate but it does happen quite often.
- tialaramex 9y agoIndeed it does. That's the process which was mooted last September. However contributors _and Apache Board Members_ chimed in to announce that Apache OpenOffice was healthy and would continue. They managed, weeks laters, to spit out a release containing almost literally just one bug fix and then nothing since. So long as Board Members pretend everything is fine the Apache process won't trigger. This has become about the ego of Board Members versus the interests of the wider community.
- Dylan16807 9y agoThere's a huge difference between "this has bugs, like all software" and "this has known exploitable bugs and there is no mention of this anywhere". Warranties are not the same as being misleading.