3 ms·
To be fair OpenSSL was mostly ignored by industry and the community until heartbleed. “At the time of the Heartbleed attack, the OpenSSL website listed just 15
by randmeerkat 6y ago
To be fair OpenSSL was mostly ignored by industry and the community until heartbleed.
“At the time of the Heartbleed attack, the OpenSSL website listed just 15 active developers, most of whom contributed to the project on a volunteer basis. But not all changes to the OpenSSL software are written by these 15 people. Rather, these developers help to filter and organize suggested changes from a larger community of people who make occasional contributions.”
https://www.vox.com/2014/6/19/18076318/heartbleed https://www.vox.com/2014/6/19/18076318/heartbleed
If you want the government to have more competitive Federal salaries for developers then write your Senators.
As a note, I’ve seen some truly awful software written by highly paid devs, so, just paying more won’t necessarily fix the problem.
- WesolyKubeczek 6y ago> As a note, I’ve seen some truly awful software written by highly paid devs, so, just paying more won’t necessarily fix the problem. High pay is necessary, but not sufficient. With high pay, you MAY get a good product — if you attract competent people on all levels. With low pay, the mind-numbing godawfulness of the end result, if it's ever delivered, is practically guaranteed.
- Chris2048 6y agoSometimes, the high pay is to offset the terrible nature of the work, not to attract better developers, e.g. having to work on the terrible ad-hoc, micro-managed code of many previous devs.