4 ms·
The meta-problem of Heartbleed was caused by a dysfunctional and under-funded open source project of OpenSSL. The Linux Foundation's Core Infrastructure Initiat
by dankohn1 8y ago
The meta-problem of Heartbleed was caused by a dysfunctional and under-funded open source project of OpenSSL. The Linux Foundation's Core Infrastructure Initiative was founded in response to Heartbleed and eventually created the Best Practices BadgeApp as a checklist for better and more secure open source projects: https://bestpractices.coreinfrastructure.org/en https://bestpractices.coreinfrastructure.org/en
(Disclosure: I co-founded CII and the BadgeApp.)
- dwheeler 8y agoI agree! I encourage anyone who's involved in an open source software (OSS) project to get a CII Best Practices Badge at: https://bestpractices.coreinfrastructure.org/ https://bestpractices.coreinfrastructure.org/ ; if you are using OSS, then you should prefer projects with a badge. If you want to see a video that explains the badge, see "An Introduction to the Core Infrastructure Initiative (CII) Best Practices Badge" at https://www.youtube.com/watch?v=JMptmhV06j8 https://www.youtube.com/watch?v=JMptmhV06j8 New projects are participating every day (see https://bestpractices.coreinfrastructure.org/en/project_stats https://bestpractices.coreinfrastructure.org/en/project_stat... ). The badging application is itself open source software; its project site is: https://github.com/coreinfrastructure/best-practices-badge/ https://github.com/coreinfrastructure/best-practices-badge/ (Disclosure: I'm technical lead of the BadgeApp project. Hi Dan!)