Conversation

Notices

1. Glyph (glyph@mastodon.social)'s status on Saturday, 06-Apr-2024 06:40:59 UTC Glyph

   I really want to stress that everything I have said thus far about open source sustainability and the origins of the #xv problem are not *solutions*. My proposals are *mitigations*. This is not a problem that can be “solved”. It is a complex of world-historic economic allocation problems that needs to be addressed in the midst of a ton of other parallel and interacting crises. None of these activities will solve the problem, but we must do something — a lot of somethings, actually — regardless.

   • Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • Santa Claes 🇸🇪🇭🇰🎅 repeated this.
   • Glyph (glyph@mastodon.social)'s status on Saturday, 06-Apr-2024 06:40:58 UTC Glyph

     in reply to

     Anyone telling you that their product or service would have for sure stopped JiaT75 is bullshitting you. We can just make it gradually harder for this type of adversary, and this particular adversary appears to be extremely well-resourced, and they in particular will probably just try another vector.

     *That said*, the vulnerability in the ecosystem caused by the chronic undervaluing of this type of infrastructure work is HUGE and can be easily improved by very modest investment.

     Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • Glyph (glyph@mastodon.social)'s status on Saturday, 06-Apr-2024 06:40:58 UTC Glyph

     in reply to

     Anybody proposing an SBOM or a scorecard here is fundamentally unserious though please just ignore them

     Santa Claes 🇸🇪🇭🇰🎅 likes this.
   • Paul David (iamtherockstar@mastodon.social)'s status on Saturday, 06-Apr-2024 06:41:03 UTC Paul David

     in reply to

     @glyph I am so tired of “tech fixes tech” diatribes. It’s so easy to just ignore humanity entirely, because humanity is messy.

     Santa Claes 🇸🇪🇭🇰🎅 likes this.