Being appalled seems right to me.
Under many circumstances, our actions come with a certain degree of responsibility. When we write code, we have the responsibility to be pretty open about security.
Re:Multiple 7-Zip Vulnerabilities Discovered
by nickpsecurity on Thursday May 12, 2016 @05:08PM
(#11686806)
Where's the users' responsibility factor in to support the project financially or with code contributions? A gift given as is implies no responsibilities. A tool given for money should work as advertised. Yet, all this talk of responsibility appears on FOSS projects and is one way.
They have no responsibility to anyone. If you want responsibility, there's commercial offerings or you can sponsor 7-zip security for money.
Re:Multiple 7-Zip Vulnerabilities Discovered
by striking on Thursday May 12, 2016 @04:51PM
(#11686687)
Our actions do come with a certain degree of responsibility. It is the user's responsibility, then, not to use software that is "without warranty" if they do not firmly trust it.
You can claim irresponsibility whenever you want, but it takes two to tango.
Similarly, does complaining about it on a public forum have any effect? In my book, code speaks louder than words; if you really want to see change, you know what to do.