riyakhanna1983

16 ms·

121.
by riyakhanna1983 8y ago
That's a great checklist of things to look for when using an OSS. Thanks for sharing!
122.
by riyakhanna1983 8y ago
Have you used them? What's their cut?
123.
by riyakhanna1983 8y ago
NPM lists known vulnerabilities during installation, but I don't think other package managers work the same way. AFAIK, you have to download the OSS and scan with tools like BlackDuck, Synk. I see you follow a number of steps to confid
124.
Ask HN: How do you evaluate security of OSS before importing?
5 points by riyakhanna1983 8y ago|5 comments
125.
Ask HN: How do you manage vulnerabilities in the OSS projects you use?
1 points by riyakhanna1983 8y ago|0 comments
126.
EBPF and FUSE = Faster FUSE File Systems [pdf](events.linuxfoundation.org)
18 points by riyakhanna1983 8y ago|1 comments
127.
by riyakhanna1983 8y ago
Does it also check the quality of the OSS being imported (e.g., how many issues are open, how many active users, etc.)?
128.
by riyakhanna1983 8y ago
But how to know if the pinned versions are free of malicious code from an evil contributor?
129.
Ask HN: How long does open-source project approval take at your company?
6 points by riyakhanna1983 8y ago|8 comments
130.
by riyakhanna1983 8y ago
Learning kernel internals will help you deeply understand the core concepts of systems (e.g., hardware architecture, compiler optimizations, process abstractions, security layers, etc.). Having developed deep understanding of the foundation
131.
by riyakhanna1983 8y ago
What about existing tools, such as Synk, OSSIndex?
132.
by riyakhanna1983 8y ago
I wonder if the detection of such cases be automated.
133.
Ask HN: What's the overhead of forking and maintaining an open-source project?
1 points by riyakhanna1983 8y ago|2 comments
134.
by riyakhanna1983 8y ago
What are some of the things that you like/dislike about libraries.io?
135.
by riyakhanna1983 8y ago
Do you also evaluate its security posture?
136.
Ask HN: How do you assess the quality of open-source projects?
12 points by riyakhanna1983 8y ago|9 comments
137.
by riyakhanna1983 9y ago
I removed my number from my Facebook account when I realized that FB was linking my WhatsApp conversations to my FB account using my phone number and displaying ADs on my FB feed based on my WhatsApp conversations. What a desperate move by
138.
by riyakhanna1983 9y ago
tool released https://github.com/osssanitizer/osspolice
139.
Cases of Open-Source License Violations in Mobile Apps [pdf](cc.gatech.edu)
31 points by riyakhanna1983 9y ago|1 comments