←back to thread

Libxml2's "no security embargoes" policy

(lwn.net)
278 points jwilk | 1 comments | 25 Jun 25 19:36 UTC | HN request time: 0.215s | source
Show context
zppln ◴[25 Jun 25 21:51 UTC] No.44382133[source]▶
Very sad read. Much of the multi-billion dollar project I work on is built on top of libxml2 and my company doesn't have a clue. Fuck, even most of my colleagues working with XML every day don't even know it because they only interface indirectly with it via lxml.
replies(3): >>44382162 #>>44383083 #>>44385618 #
burnt-resistor ◴[26 Jun 25 00:23 UTC] No.44383083[source]▶
Well, they need to pony up around $150k or so to keep it alive rather than freeloading off the work of others.
replies(1): >>44384725 #
sneak ◴[26 Jun 25 06:32 UTC] No.44384725[source]▶
It’s not freeloading to accept a gift given freely.
replies(3): >>44384899 #>>44385604 #>>44387586 #
1. KingMob ◴[26 Jun 25 06:58 UTC] No.44384899[source]▶
Yet in real life gifting, we expect reciprocity and have norms. (E.g., if little Johnny doesn't bring a present to Sally's birthday party, he never gets invited back.)

Asymmetrical gifting is only acceptable with a power imbalance; if the boss gives an employee a gift, it need not be reciprocated.

FOSS actually turns this on its head, since unpaid volunteers are giving billionaires like Bezos gifts. Worse, people argue in favor of it.