Re:Maybe you shouldn't install new software for a bit
by uecker on Friday May 08, 2026 @04:27AM
(#48060285)
The problem is that they get away too easily with bugs in their products they ship to customers. If this would come with some penalties, there would be some incentive to invest in security and this would probably often flow back to upstream projects.
Re:Maybe you shouldn't install new software for a bit
by teytra on Friday May 08, 2026 @06:22AM
(#48061119)
Like a money-back guarantee?
Like you get when you buy e.g. MS products?
/s
Re:Maybe you shouldn't install new software for a bit
by uecker on Friday May 08, 2026 @06:45AM
(#48061282)
I am not talking about the open-source projects, but the downstream products such as cars that integrate curl.
Re:Maybe you shouldn't install new software for a bit
by marcus_holmes on Friday May 08, 2026 @08:32AM
(#48062137)
Seriously? You think that curl gets away with bugs shipping to prod? And that's the major problem?
I don't agree with any of that.
There's a bunch of problems with getting companies to pay for this, too - that sense of entitlement (or even contractual obligation), the ability to control the project with cash, etc.
I don't have any answers or solutions. But I don't think we can hand-wave the problem away.