wibblewobble125
wibblewobble125 on Hacker News
* “Many __informal__ eyes have probably looked at it”
* Lack of recent __number__ of (known) vulnerabilities
* “Serious guys” (appeal to authority)
I think you’re using short-hand, but perhaps the short-hand should be different. E.g.
* A list of audits by date, independent organization, is provided __here__ which is evidence of review
* The vulnerability acknowledgement, correction and release process is prompt, accurate and detailed, which is documented __here__
* XYZ coding, testing, fuzzing, proving, bounty, integration with other systems, documentation, defaults etc. practices are used in the interest in hardening the code, limiting moving parts, attack radius, etc.
Hell, I’m still on a version of magit from 2014 because they wouldn’t stop moving things around despite it being, in my opinion, done. In all other software in my life I have to put up with things constantly changing for silly reasons, Emacs is the one piece of software where I’m in control.
I fully empathize with the poster being infuriated with changing behavior. I might not agree with the way it’s being expressed. It’s sort of “et tu, Emacs?”
As a manager, I empathize with the frustration you were feeling. Steering a team or a community towards a vision is very hard. Just when you think you’re getting somewhere, someone does the exact opposite and mixes people up. It’s easy to lose patience. I’ve made similar mistakes on popular projects and was fortunate enough that no one publicized them. I was allowed to learn from my mistakes without being punished for it.
I don’t have any advice on this. It’ll probably turn out fine.