3 ms·
Not always. TrueCrypt and OpenSSL comes to mind first. Sure, OpenSSL is more supported now, but it happened only after Heartbleed panic, when everyone realised
by kbart 12y ago
Not always. TrueCrypt and OpenSSL comes to mind first. Sure, OpenSSL is more supported now, but it happened only after Heartbleed panic, when everyone realised how dependant they are on few overworked and underpaid programmers. Except several well known OSS projects, most others get only peanut money from donations.
- kyllo 12y agoThese are sort of the exception that proves the rule, though. Corporations don't want to rely on poorly supported OSS projects, they prefer to pay for support so they can hold someone accountable for fixing it when it breaks. OpenSSL was a bit of a blind spot in this regard. I think corporations just didn't realize they were depending on it and/or how much of a risk factor it was, they learned that the hard way.