Re:Welcome to the Strip Mining Era of OSS Security
by dynawicki on Friday May 15, 2026 @08:19AM
(#48147702)
Good luck getting anyone who values their time to even triage the results.
I would rather lick the bottom of a NYC dumpster that a rat had just died in.
[ Parent
| on HN ]
Re:Welcome to the Strip Mining Era of OSS Security
by salsakran on Friday May 15, 2026 @08:25AM
(#48147755)
That was true last year -- things changes.
Ignore (admittedly low-effort LLM generated) reports at your own peril.
Re:Welcome to the Strip Mining Era of OSS Security
by dynawicki on Friday May 15, 2026 @08:27AM
(#48147774)
Software will eventually become "unmaintainable due to lack of interest", because of this very thing. People not invested in this are not "in peril" in any way.
Re:Welcome to the Strip Mining Era of OSS Security
by bluGill on Friday May 15, 2026 @08:55AM
(#48148000)
A lot of people are invested without realizing it. I'm typing this on a computer running linux, with all the standard services/software. I maintain one OSS project (icecc - we have always said only run on trusted networks. I'm sure there are a lot of issues in our code but nobody has bothered run a scan yet to my knowledge), but I don't pay attention to everything. I'm sure there are known easy to exploit (with a LLM) issues on this computer just because my distro hasn't updated yet. (I need a better distro, but even the most up to date will constantly have these issues)
Re:Welcome to the Strip Mining Era of OSS Security
by dynawicki on Friday May 15, 2026 @09:02AM
(#48148059)
What you just described may be accurate. But it also is the essence of a "trap".
My comment about investment was more to that point.
If software "is a trap", even my ever-computing loving wrote first programs on an Apple II in the 80s will only be as you sort of describe invested in by reference (minimal usage).
But no-one will sign up for a "trap" as a career, and only those who do will deal with its problems. The first thing that comes to mind is "Johns", "Hotels", and the trappings of the sex trade.