5 ms·
No part of the bill requires actually securing software, or, like, running scans, or fixing vulns, or anything like that. It's a weird jobs program and mostly j
by throwawaaarrgh 4y ago
No part of the bill requires actually securing software, or, like, running scans, or fixing vulns, or anything like that. It's a weird jobs program and mostly just adds bureaucracy.
- ellisv 4y agoThere is mandamus language that directs the DHS Director to "bolster the security of open source software", "support Federal efforts to strengthen the security of open source software", etc. but it's up to the director to determine the methods of doing so.
- lr4444lr 4y agoForgive me if my bar is too low, but just to see bipartisan efforts at all toward this is a refreshing bright spot in American politics. Let's not make the perfect the enemy of the good.
- ren_engineer 4y agoPatriot act was bipartisan, generally if both parties agree on something it isn't good for the average American citizen
- willcipriano 4y agoWhen the uniparty wins, the people always lose.
- dmix 4y agoI'd much rather they spent money hiring people to contribute to securing open source and doing outreach, rather than just some mandatory "software scanning" which generate noisy alerts no one does anything about. Or neither. Just make a fund to hire talent to work all day hardening OSS projects. Rather than all the new mandatory meetings and oversight.