Post #3614418
2026-06-28 15:07 UTC
@zmanion@infosec.exchange @aristot73@infosec.exchange @icing@chaos.social until proven, I remain skeptic that any of them will work with upstream in ways that are actually helpful and beneficial *for the upstream*. All these efforts are primarily made to sell something to users ("more secure Open Source"), and I think their priorities are then on that. Not to actually help the ones with the biggest challenges (the upstream projects). But yes, I'm a cynic and I hope I'm wrong.
Replies (1)
-
@sethmlarson@mastodon.social 2026-06-28 17:37
@bagder@mastodon.social @zmanion@infosec.exchange @aristot73@infosec.exchange @icing@chaos.social Python and urllib3 had positive first-hand experiences with “Patch the Planet”. Trail of Bits is great collaborating with upstream, specifically meeting the pace the project is able to do.