3 ms·
> If I ever release some open source project that achieves the same success as Log4j, and, at any time, gets a similarly dangerous vulnerability, I'll make sure
by manuelabeledo 5y ago
> If I ever release some open source project that achieves the same success as Log4j, and, at any time, gets a similarly dangerous vulnerability, I'll make sure not to release the hotfix for free.
Uh... Isn't the point of open source software to release the code, and thus to be able to make modifications of it?
- WJW 5y agoFor an economically rational actor, they'd have to compare the costs of the hotfix (not free) and the costs of writing it themselves (takes at least some amount of dev time, which costs money). Unless of course there is some other open source dev who makes their patch available for free.