Friend who is not a software person sent me this tweet, which amused me as it did them. They asked if “runk” was real, which I assume not.

But what are some good examples of real ones like this? xz became famous for the hack of course, so i then read a bit about how important this compression algorithm is/was.

  • onlinepersona@programming.dev
    link
    fedilink
    arrow-up
    36
    arrow-down
    5
    ·
    5 months ago

    I bet he’s paid nothing to do it. Then one day, when a timing attack happens that can be traced to the DB, some knobhead CTOs and tech influencers will start talking about “securing the supply chain”. They’ll want other such bullshit and responsibilities to be shoved unto volunteers.

    Two quotes come to mind “Fuck you, pay me” and “Open source maintainers owe you nothing”.

    Anti Commercial-AI license

    • MisterFrog@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      5 months ago

      It would make sooo much more sense for the ISO to set something up, and make governments each responsible for keeping it updated, since they’re the ones doing the changing.

      Require all participants to amend their law/regulations, so there’s a note to prompt whoever is in power and changes it next.

      I’m sure some places would still neglect to do it… Haha