VSCodium – Libre Open Source Software Binaries of VS Code

Re:VSCodium – Libre Open Source Software Binaries of VS Code by danpalmer on Monday September 04, 2023 @01:43PM (#37382925)

I'm speaking from experience at Google, and honestly our software integrity processes are like nothing I could have imagined coming in. Not everything is perfect and it has clearly evolved over time, but basically for a modern internal Google codebase I don't think I could have much more trust that it is what it claims to be.

I don't know if other big tech is quite the same, but from the little I've heard, I suspect that Microsoft, Amazon, Apple, and others in that ilk are similar.

I'm very much in the camp of "trust but verify" here. You're right that Solar Winds was an utter disaster. It should never have been able to happen.

[ Parent | on HN ]

Re:VSCodium – Libre Open Source Software Binaries of VS Code by dv_dt on Monday September 04, 2023 @02:29PM (#37383394)

Microsoft has had some serious recent faults in their fundamental handling of a couple of areas (like driver signing! https://news.ycombinator.com/item?id=37261500).

[ Parent | on HN ]

Re:VSCodium – Libre Open Source Software Binaries of VS Code by MaxBarraclough on Monday September 04, 2023 @03:50PM (#37384260)

And that's on top of Azure's recent appearance in the news.

https://news.ycombinator.com/item?id=36979532 (Microsoft comes under blistering criticism for “grossly irresponsible” security)

[ Parent | on HN ]