3 ms·
Vetting sources is only basic due diligence. Auditing source code, infrastructure, and data storage is crucial regardless of how “prolific” the author is.
by yunohn 5y ago
Vetting sources is only basic due diligence. Auditing source code, infrastructure, and data storage is crucial regardless of how “prolific” the author is.
- cxr 5y ago> Vetting sources is only basic due diligence. Right, which is my point.
- yunohn 5y agoYou’re saying this individual is more trustworthy than Mozilla, because of employee churn? There’s a bus factor of 1 vs N in this example. I trust indie devs for lots of software, tools, and apps; but absolutely not an extension that reads my privileged communications.