Post #1434842
2023-01-01 19:17 UTC
@hook I mean I would say it did not become misinterpreted. It's just that... it was never interpreted at all. Licenses moved to be more permissive so that you can't really not respect them.
And then the "supply chain" problem came back through infosec, not through maintenance and sustainability. Supply chain these days means finding who is responsible, not realizing you depend on them.
The infosec crowd never seem to have realised this is an ecosystem problem, not a "bug" problem.
Replies (1)
-
@Di4na@hachyderm.io 2023-01-01 19:18
@hook Put otherwise... We are using the same definition for "supply chain incidents" that we use with "operational incidents" like the website crashing. Aka "the system can only go wrong if humans that code it did it wrong". At no point do we wonder "what circumstances made them take that decision". Which ofc tie it back to #LFI and #Safety-II but these are still pretty niche stuff in software. happy to talk more about them though