2 ms·
> "We can read this SolarWinds blog entry from 2019 [1] with amusement; it claimed that open-source software makes one's chance of downloading malicious softwar
by weinzierl 6y ago
> "We can read this SolarWinds blog entry from 2019 [1] with amusement; it claimed that open-source software makes one's chance of downloading malicious software "much higher". That post has not aged well, but this attack could also happen with free software, which is distributed in binary form through a large number of trusted channels. Malicious code inserted into one of those supply chains could be used with devastating effect; we can only hope that the suppliers we trust are truly trustworthy."*
The side-cut at SolarWinds made me smile. I don't like the last sentence though. We should strive for more than good hope here.
[1] https://thwack.solarwinds.com/t5/Geek-Speak-Blogs/The-Pros-and-Cons-of-Open-source-Tools/ba-p/478665\ https://thwack.solarwinds.com/t5/Geek-Speak-Blogs/The-Pros-a...
- pabs3 6y agoThese projects are a good start for that: https://reproducible-builds.org/ https://reproducible-builds.org/ https://bootstrappable.org/ https://bootstrappable.org/