←back to thread

Libxml2's "no security embargoes" policy

(lwn.net)
277 points jwilk | 1 comments | 25 Jun 25 19:36 UTC | HN request time: 0.217s | source
Show context
zppln ◴[25 Jun 25 21:51 UTC] No.44382133[source]▶
Very sad read. Much of the multi-billion dollar project I work on is built on top of libxml2 and my company doesn't have a clue. Fuck, even most of my colleagues working with XML every day don't even know it because they only interface indirectly with it via lxml.
replies(3): >>44382162 #>>44383083 #>>44385618 #
burnt-resistor ◴[26 Jun 25 00:23 UTC] No.44383083[source]▶
Well, they need to pony up around $150k or so to keep it alive rather than freeloading off the work of others.
replies(1): >>44384725 #
sneak ◴[26 Jun 25 06:32 UTC] No.44384725[source]▶
It’s not freeloading to accept a gift given freely.
replies(3): >>44384899 #>>44385604 #>>44387586 #
1. meepmorp ◴[26 Jun 25 14:08 UTC] No.44387586[source]▶
I've never once expected someone to repair a gift they gave me because I found a flaw in it. That's when it becomes freeloading.