3 ms·
This is really smart, and I hope this becomes the norm across all governments. Governments not knowing what their software is doing is a recipe for chaos. Hop
by rasengan 2y ago
This is really smart, and I hope this becomes the norm across all governments.
Governments not knowing what their software is doing is a recipe for chaos.
Hopefully this also leads to more audits of said code.
- stairlane 2y agoHopefully this also introduces standardized auditing of open sourced packages. Just because something is open sourced, doesn’t mean it’s altruistic and not susceptible to malicious actors submitting seemingly innocuous code that gives bad actors a back door. The xz fiasco earlier this year should encourage every organization to conduct such audits. A code smell could and should be enough for packages to not be supported.