Why would you lead with a legitimate question and then finish with an outright insult?

How can software be insulted? Software doesn't have feelings.

This logic is the reason it sucks to be an open-source maintainer.

The original comment being discussed, suggested that Docker is terrible from a security point of view, which frankly I agree with.

Docker only got root privilege isolation (i.e. don't run every container as root on the host) a little over 12 months ago.

Their entire approach seems to be "build whatever buzzword batshit crazy idea cool kids want", with "hey is this shit stable, or even remotely secure?" way down the list of questions even considered during development.

Also: if someone is an OSS maintainer, and their response to bug reports is as bad as Dockers have been, sorry but they deserve to feel bad. The "you" I refer to below is a mythical OSS maintainer, not you specifically, @andrewguenther.

Maintaining software doesn't automatically remove any responsibilities you have to maintain the community. If there are huge issues with the software, you have two choices:

- acknowledge and identify a plan to solve the issues. In this case, assuming the issues are resolved in a timely fashion, I would expect people to remain courteous.

- treat the community as shit, ignore security concerns, and never fix fundamental bugs. In this instance, you should expect people to call your project out for the piece of shit it clearly is.

Let's also be clear here: we're not talking about some tin-pot project with 2 guys hacking away on their lunch breaks to find a cure for cancer, who are being told "this is crap".

Docker is developed by Docker Inc, a company that received nearly $170M in venture capital investment just in 2014-2015, and apparently makes several million a year in revenue.

You're not talking to software. You're talking to human beings about their software. You can criticize Docker's security track record in a more constructive way. There's nothing to be gained by being an asshole.

Someone suggests that Docker's reputation for security is terrible (which it is), and your response is to call someone else in the conversation an asshole, and suggest they should be more constructive?

Yes, and I called out his post for being assholish (which it is). If we're calling a spade a spade then it goes both ways.

You're the one claiming we shouldn't call a spade a spade.

So, do as you say, not as you do, eh?

Also, how on earth is suggesting a piece of software has a terrible security reputation, "assholish".

"So, do as you say, not as you do, eh?"

Exactly.

I must say, most hypocrites aren't so quick to admit it.