4 ms·

I'm a little bit confused here. You are saying they are not responding appropriately but this was raised as an issue and merged the same day?

by jofzar 2y ago

ckolkey 2y ago
...seven months ago, no less
Retr0id 2y ago
The developer response indicates that they were flipping security-sensitive configs based on vibes alone. While the fix was merged promptly in this instance, they don't appear to have undertaken any kind of systematic reform.
- SG- 2y ago
  but it got fixed. this is a free project, people like yourself are honestly a cancer to these projects and developers.
  - nobunaga 2y ago
    If your main primary marketing line is privacy focused and you ignore multiple issues raised and avoid any and all discussions about the privacy you promise then I think its valid to be concerned. Your premise that people should be able to market their project with promises and not live up to them, especially privacy in this day and age, is the real cancer. And people like yourself pushing the acceptance of this behaviour is cancer too.
    - ahofmann 2y ago
      “security problems are just bugs” - Linus Torvalds And he is 100% right on this. The whole thread, or even that it got posted here on in shows the problem. It was just a bug. The maintainer fixed it. Open source works. You can't throw the whole project under the bus just because maintainer made a mistake, that happened to he a security problem.
      - nobunaga 2y ago
        My main concern is the lack of interest in the security problems being raised and the constant attempt at silencing of people raising issues or silence itself. Not just this bug but other links were provided on and the developers deliberate attempt at ignoring or or shutting down discussion. This isnt just about one bug. Dont be so naive. The developer is selling a product on a given feature, privacy and they neither care about it or have the ability to implement privacy properly. What about the people who believe them that the browser is private when its not? What if genuinely someone relied on its privacy for their important work but in reality its not? This isnt about the developer. Its bigger than that and your ignorance on this is kind of part of the problem.
        deleted 2y ago
        [deleted]
        ahofmann 2y ago
        First of all: I'm not using Zen browser, I don't know what it is, what it sells etc. Frankly I don't care about Zen browser and I've not read the other links, you provided. I wrote my post, because there is a strange thing happening when security bugs are discovered: Everyone seems to panic. And in every discussion on such threads people will throw in their alternatives that should be used because this one is clearly not up for the job... Threads like this are actively hurting the project and the cause. The bigger picture is, that this behavior hurts all alternative projects. There is a constant barrage of problems that the maintainera are dealing with and everyone thinks, his problem should be solved first. This is not how building software works. As a maintainer you can't help everyone every time. And people like you, that run around on the Internet and create the feeling that the maintainer is careless, can kill the project. The mega corps have PR teams, that deal with problems like this. Because they know how dangerous this can get. Even Firefox isn't big enough that they can absorb all the shit that is thrown at them. How can some little project on GitHub deal with people like you? They can't and they can loose their project because of this. I don't want that. I want alternatives to rise and thrive. I want an internet where sixteen browser engines are competing against each other, not two, or three. So please stop shitting on the little projects, that try to do better. Instead contribute, fill issues, and enjoy that it is possible to build together better software.
  - deleted 2y ago
    [deleted]

I'm a little bit confused here. You are saying they are not responding appropriately but this was raised as an issue and merged the same day?

by jofzar 2y ago

I'm a little bit confused here. You are saying they are not responding appropriately but this was raised as an issue and merged the same day?

ckolkey 2y ago

...seven months ago, no less

Retr0id 2y ago

The developer response indicates that they were flipping security-sensitive configs based on vibes alone. While the fix was merged promptly in this instance, they don't appear to have undertaken any kind of systematic reform.

SG- 2y ago
but it got fixed. this is a free project, people like yourself are honestly a cancer to these projects and developers.
- nobunaga 2y ago
  If your main primary marketing line is privacy focused and you ignore multiple issues raised and avoid any and all discussions about the privacy you promise then I think its valid to be concerned. Your premise that people should be able to market their project with promises and not live up to them, especially privacy in this day and age, is the real cancer. And people like yourself pushing the acceptance of this behaviour is cancer too.
  - ahofmann 2y ago
    “security problems are just bugs” - Linus Torvalds And he is 100% right on this. The whole thread, or even that it got posted here on in shows the problem. It was just a bug. The maintainer fixed it. Open source works. You can't throw the whole project under the bus just because maintainer made a mistake, that happened to he a security problem.
    - nobunaga 2y ago
      My main concern is the lack of interest in the security problems being raised and the constant attempt at silencing of people raising issues or silence itself. Not just this bug but other links were provided on and the developers deliberate attempt at ignoring or or shutting down discussion. This isnt just about one bug. Dont be so naive. The developer is selling a product on a given feature, privacy and they neither care about it or have the ability to implement privacy properly. What about the people who believe them that the browser is private when its not? What if genuinely someone relied on its privacy for their important work but in reality its not? This isnt about the developer. Its bigger than that and your ignorance on this is kind of part of the problem.
      - deleted 2y ago
        [deleted]
      - ahofmann 2y ago
        First of all: I'm not using Zen browser, I don't know what it is, what it sells etc. Frankly I don't care about Zen browser and I've not read the other links, you provided. I wrote my post, because there is a strange thing happening when security bugs are discovered: Everyone seems to panic. And in every discussion on such threads people will throw in their alternatives that should be used because this one is clearly not up for the job... Threads like this are actively hurting the project and the cause. The bigger picture is, that this behavior hurts all alternative projects. There is a constant barrage of problems that the maintainera are dealing with and everyone thinks, his problem should be solved first. This is not how building software works. As a maintainer you can't help everyone every time. And people like you, that run around on the Internet and create the feeling that the maintainer is careless, can kill the project. The mega corps have PR teams, that deal with problems like this. Because they know how dangerous this can get. Even Firefox isn't big enough that they can absorb all the shit that is thrown at them. How can some little project on GitHub deal with people like you? They can't and they can loose their project because of this. I don't want that. I want alternatives to rise and thrive. I want an internet where sixteen browser engines are competing against each other, not two, or three. So please stop shitting on the little projects, that try to do better. Instead contribute, fill issues, and enjoy that it is possible to build together better software.
- deleted 2y ago
  [deleted]