• 0 Posts
  • 7 Comments
Joined 3 years ago
cake
Cake day: June 9th, 2023

help-circle




  • Hopefully more projects take advantage of vulnerability scanning and monitoring tools like those in this OWASP list https://owasp.org/www-community/Free_for_Open_Source_Application_Security_Tools, have good code quality standards to make their projects easier to understand and evaluate, contribute and respond to CVE reports, and get third party security auditing.

    All of that is hard to motivated those throwing their code out to the world only to share how they scratched their itch to perform. I think we need a combination of governments and non-profits providing incentives / grants to projects doing good practices, document and provide trusted a forum to validate vulnerabilities, give some backing to “trusted” frameworks, and provide some vulnerability and auditing themselves.

    The recent EU push into more government open source usage will help as they will be more incentivized to secure the pipelines and everyone will benefit the fruits of that firehose of funding.


  • Even if you disagree with my assessment of Russia’s annexation, isn’t an international body ( that Russia itself has membership) working with your people, with guarantees for self rule and an end to the war better than status quo?

    If you’ve supported Donbas independence, with wishes for greater ties to Russia instead of Europe, you still get that in this agreement. Donbas can still legitimately join Russia in a few decades, and still trade with them now.


  • I get that you’re making some weird comparison to Iraq and Afghanistan, but who besides the world itself would be the colonizer in my recommended arrangement? The world itself in my recommended United Nation governance followed by a local government chosen by their own legitimate referendums with international observers and gun free polls? Is that not better than Russia just claiming them with no say by the people (unless you believe the sham referendums under armed watch in a war zone as legitimate)?