←back to thread

Libxml2's "no security embargoes" policy

(lwn.net)
278 points jwilk | 1 comments | 25 Jun 25 19:36 UTC | HN request time: 0s | source
Show context
JonChesterfield ◴[25 Jun 25 22:25 UTC] No.44382335[source]▶
This is an alarming read. Not so much the "security bugs are bugs, go away" sentiment which seems completely legitimate, but that libxml2 and libxslt have been ~ solo dev passion projects. These aren't toys. They're part of the infrastructure computing is built on.
replies(5): >>44384388 #>>44384598 #>>44384778 #>>44385323 #>>44385522 #
1. jeroenhd ◴[26 Jun 25 08:59 UTC] No.44385522[source]▶
These projects are toys. The real problem is that multi billion dollar companies are using toys to keep you safe. Maybe we shouldn't build our core infrastructure with LEGO blocks and silly putty.