8 ms·
> We believe that an effective an immediate action would be to update the code of conduct of OSS, such as adding a term like, "by submitting the patch, I agree
by blendergeek 6y ago
> We believe that an effective an immediate action would be to update the code of conduct of OSS, such as adding a term like, "by submitting the patch, I agree to not intend to introduce bugs."
Do the authors of this study honestly believe that the reason malicious actors intentionally introduce security vulnerabilities in software is because the "code of conduct of OSS" doesn't prohibit it? Do the malicious actors read the code of conduct and think, "Oops, I can't be malicious here, I'll try somewhere else".
- finnthehuman 6y agoThe only people that could stop would be this research. Maybe. Or maybe it'll give this guy an excuse to pad his resume with another paper entitled "Feasibility of ignoring requests asking me, specifically, to piss off."
- jimhefferon 6y agoI have been in meetings involving FOSS software that were about someone doing something obnoxious, and when a response is proposed, someone in the room says "But we have no statement disallowing what they did."
- cortesoft 6y ago> Do the malicious actors read the code of conduct and think, "Oops, I can't be malicious here, I'll try somewhere else". Nope, but it will protect you from researchers with questionable ethics
- adhoc_slime 6y agohow does a code of conduct prevent that?
- viggity 6y agoYeah, it's all theater. A few weeks ago I opened a business banking account and the banker asked me what my company did, and I told her "I traffic underage girls, and sell methamphetamines". Woooo boy, she did not like that. It was an obvious joke and she knew it, but honestly, what criminal is going to tell the truth about their illicitly gotten gains?