Third High Severity CVE in Log4j Is Published

Re:Third High Severity CVE in Log4j Is Published by akeck on Saturday December 18, 2021 @02:08PM (#29607508)

I read a post recently that said part of the open source funding issue comes down to a financial "structure" mismatch. Open source folks are often individuals or loose collections of individuals. Sometimes they have things like Patreons, ask to receive crypto currencies, etc. Companies don't/can't provide funding via these types of structures, so the writer of the post ended up incorporating a company, setting up a mercantile bank account, commercial payment processing, etc., so companies would be comfortable funding his efforts. Fortunately, this path is lot easier lately with services like Stripe, etc.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by themerone on Saturday December 18, 2021 @03:44PM (#29608346)

My Fortune 500 company has to pay a third party to pay for Google Maps, because we can't pay a supplier with a credit card.

If we can't find a way to pay Google, there is no hope for some random developer in Nebraska.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by ytdytvhxgydvhh on Saturday December 18, 2021 @04:57PM (#29608946)

That feels backwards. Little shops are flexible and can probably do what needs to be done. Lumbering behemoths have (too many) rules and restrict themselves (often) unnecessarily.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by themerone on Sunday December 19, 2021 @12:36PM (#29616080)

Nebraska is a reference to https://xkcd.com/2347/

[ Parent | on HN ]

[dead]

Re:Third High Severity CVE in Log4j Is Published by themerone on Saturday December 18, 2021 @10:14PM (#29611001)

I am a developer in the midwest, and maybe if you hadn't completely missed my poin you wouldn't be such a jerk.

Nebraska is a reference to an XKCD Comic (https://xkcd.com/2347/). The idea is that there are nameless people all over the world contributing to critical open source infrastructure.

Back to the point.

Running Google Maps on one of my low traffic sites, would generate at most, several dollars a month in charges. It would be a rounding error in our budget, and we can't pay it. Our purchasing rules are not flexible enough to work with google.

Paying Google is hard enough, an independent oss developer with no company would be impossible. I would get laughed at if I suggested throwing a few bucks at a developers Patreon.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by lazide on Sunday December 19, 2021 @01:17AM (#29611858)

How does your company handle coffee? Surely there is SOME mechanism for small incidental charges, or how could your company even exist?

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by yjftsjthsd-h on Sunday December 19, 2021 @02:49AM (#29612204)

Coffee company sends a monthly invoice.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by lazide on Sunday December 19, 2021 @03:54PM (#29618281)

So no Starbucks with a client on sales calls I guess?

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by hotpotamus on Saturday December 18, 2021 @02:39PM (#29607816)

I have a feeling if a company wrote a large enough check, they'd figure out how to cash it.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by ricardobayes on Saturday December 18, 2021 @02:47PM (#29607883)

Well, wrte it to whom? No legal structure is what the comment was partly about.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by ldng on Saturday December 18, 2021 @07:03PM (#29610021)

They must adapt. Period. And don't worry, when they have to, they do find solutions. The thing is, with open source, you don't have to, worse, the vast majority of enterprises rely because you don't need to make any effort.

[ Parent | on HN ]

Re:Third High Severity CVE in Log4j Is Published by wiether on Sunday December 19, 2021 @03:41AM (#29612409)

Solving this issue isn't one of the goals of https://opencollective.com/ ?

[ Parent | on HN ]