News for hackers. Stuff that matters.

A comment on Are pull requests bad because they originate from open-source development?. Parent comment

Re:Are pull requests bad because they originate from open-so... by arkaeologic on Tuesday April 25, 2023 @03:17AM (#35697476)
Just a small note: "trust but verify" is not a reasonable statement, and it was also unreasonable in its original context, which I encourage anyone to research.

If you can verify, trust is not required.

[ Parent | on HN ]
Re:Are pull requests bad because they originate from open-so... by funcDropShadow on Tuesday April 25, 2023 @04:29AM (#35697921)
How do you verify, that the requirements where correctly understood, if not by having another human look at it?
[ Parent | on HN ]
Re:Are pull requests bad because they originate from open-so... by bluefirebrand on Tuesday April 25, 2023 @09:55AM (#35700524)
The idea is "trust early, verify eventually"

As opposed to "trust blindly"

The opportunity to verify immediately is rarely available.

[ Parent | on HN ]
Re:Are pull requests bad because they originate from open-so... by ilyt on Tuesday April 25, 2023 @10:26AM (#35700955)
I think it is usually used in context of "we don't verify because we don't trust you but because mistakes always happen".
[ Parent | on HN ]