3 ms·
Most people are incapable of taking any responsibility for issues in bash or openssl, in fact people who rely on them might not even know they exist , let alone
by jiggy2011 12y ago
Most people are incapable of taking any responsibility for issues in bash or openssl, in fact people who rely on them might not even know they exist , let alone be able to fix them. If you buy something from Microsoft you are paying them to take care of everything from the kernel upwards so that you don't need to worry about the details.
- gggmaster 12y agoYou can pay someone to improve open source tools, too.
- jiggy2011 12y agoThere are hundreds, maybe thousands of programs that make up a full open source system and frequently they are maintained by different groups of people with very different situations as regards to motivations and funding. There's no reasonable way that anyone outside of a few big tech companies can possibly review all of these and ensure that funding is distributed appropriately.
- lukeschlather 12y agoWe are talking about bash here. There is no mystery about who to donate to. GNU has a pretty good approach to the problem you describe.
- jiggy2011 12y agoIt was bash this time, who knows what it will be next time?
- XorNot 12y agoBut relatively few of them are internet/user-facing in any given deployment. You only need to secure/audit the attack surface, not the whole stack.
- jiggy2011 12y agoUntil a few days ago , I would not have called bash "internet facing".