8 ms·
This is almost impossible for remote OSS maintainers. Do you want people to upload passports? And what if a three agency can easily produce whatever material yo
by markus_zhang 3y ago
This is almost impossible for remote OSS maintainers. Do you want people to upload passports? And what if a three agency can easily produce whatever material you want?
- lenerdenator 3y agoSounds like it's time for someone to either pay a few visits to the remote maintainer or give them a scholarship for attending a few conferences.
- markus_zhang 3y agoThe big companies can do that. But then there is also the question of -- how many of these critical OS libraries are there in the wilderness?
- lenerdenator 3y agoI feel a census coming on. There needs to be a reckoning of who is doing what where on this sort of thing. After this whole fiasco you'll probably see more contracts wanting to know who's working on these things, and that will, in turn, have people auditing their software's packages.
- to11mtm 3y agoThe reality of such criteria is that it will be a ladder-pull for any new entrants. Not a workable option, full stop.