Notepad++ seems to be only Windows. Seems would be better to support a cross-platform text editor.
I believe Software are selected based on the usage. So if it is most used editor, they should sponsor it irrespective of the OS.
EU to fund bug bounty programs for open-source projects
21–30 of 153 posts
Re: EU to fund bug bounty programs for open-source projects
#22Seems like it would quite easy to game the system. Make contributions with known vulnerabilities and then submit an anonymous bug report when the contribution is approved.
Easier is to join a company which pays for development.
Re: EU to fund bug bounty programs for open-source projects
#23Is it worth to spend 90kEUR on putty, considering windows nowadays has openssh?
Most places are not running the latest version of Windows. And even if their SOE is Windows 10 I guarantee you that their VDI isn't. And since Putty doesn't need an installer it's easy for users to install themselves even when the machines are locked down.
So given that pretty much every government/company probably has some incidental security exposure to Putty it is a smart investment to make sure it's bug free.
Re: EU to fund bug bounty programs for open-source projects
#24Notepad++ seems to be only Windows. Seems would be better to support a cross-platform text editor.
You have it backwards.
It isn't about promoting open source products. It's about defending against open source products that are already being used. Likely heavily used within the EU institution itself.
Re: EU to fund bug bounty programs for open-source projects
#25Why PHP & Symphony ? This joke which is getting way too far. I'm getting tired of seeing it, and I'm tired of arguing why sticking with a language like that is a mistake. Bug Bounties are great, but I'd like to see people put their brain on for a moment and stop relying on what they learnt when they were 14 neither propose it as a valid solution today or encourage other people to use them. I'm getting very tired of t…
PHP is used for a massive amount of software out there. I hate the language as much as anyone (probably more since I had to work with it extensively), but that doesn't change the above fact. From Wordpress and Drupal to countless custom websites and apps built with Laravel or Symfony, this is a very worthwhile area to invest this money in. Regardless of how much you don't like PHP.
I very well know how much PHP is used.
However the possibilities and outcomes a learning developper has by choosing PHP are very well enclosed to the few things PHP gives instead of the myriads of things other tools offer. I won't even talk about the semantic.
On the other hand letting the dev learn JS or Python or even C++ in a pre-thought way will let much more different technologies and "tech-area" to their grasp instead of getting enclosed in the almighty web jobs.
You'll start hating PHP when you'll get friends who loose all interest in programming by choosing to earn their life satisfied of themselves for the few buks they earned.
I'm not satisfied of what PHP gives, neither what I can do with it.
Why would I learn PHP if I know Python and C & JS ? I don't see any except for the one you told me which is that it is used by plenty of software and that it is very popular. However, every main tech that is released today is released with a Python API or JS API.
So tell me, Why the hell would you tell somebody to enclose himself in this tool other than earning a few easy buks or working for another web company ?
So I can tell him to build some weird hook to use the main techs ? So I can tell him we did no investment on architecture other than money ?
I cannot think of PHP companies as something else than a no-innovation, no-research, no-interest & no change since 2000's.
Hell maybe upgrade the one framework used one more time that may do ?
Go Python you have access to Data science, web dev, all unix things and accessible, hell you can even try to make a little game with it.
Go JS, you also have access to myriad of stuff, I won't even have to say how much.
Now please tell me what I can do with PHP, I want to see newcomers read what options you have by learning PHP.
PLEASE.
Re: EU to fund bug bounty programs for open-source projects
#26For so much austerity this is insulting.
Re: EU to fund bug bounty programs for open-source projects
#27What if they took all the office suite licenses budget and they invested it in an open source office suite project like LibreOffice, Caligra suite (formerly KOffice) or Gnome Office.
The city of Munich tried to develop a Linux distribution "Limux" that was used for some time, but political considerations ultimately reversed the decision. https://en.m.wikipedia.org/wiki/LiMux
Thats a nice way of putting cronyism, lobbyism and tech-iliteratism.
Re: EU to fund bug bounty programs for open-source projects
#28Why PHP & Symphony ? This joke which is getting way too far. I'm getting tired of seeing it, and I'm tired of arguing why sticking with a language like that is a mistake. Bug Bounties are great, but I'd like to see people put their brain on for a moment and stop relying on what they learnt when they were 14 neither propose it as a valid solution today or encourage other people to use them. I'm getting very tired of t…
I don’t see your issue with PHP. It’s a fairly good language to work with still. The fact that it’s often used by morons doesn’t make the language terrible (though most morons are now migrating to node.js).
I have no idea how the development of the PHP language works, but most languages are supported by their community, no? The amount of morons contributing the language tends to scale linearly with the amount of morons using it.
Also, I'm sure most of this has been fixed, but it sure sounds like a terrible language...
Re: EU to fund bug bounty programs for open-source projects
#29Is it worth to spend 90kEUR on putty, considering windows nowadays has openssh?
Is it worth spending money on Drupal considering we nowadays have anything else ? The answer is yes. The value of these bug bounty programs is directly tied to the amount of use the software gets (and most of these get used a ton, including Putty, regardless of alternatives).
Do people using these oldish softwares update them, though?
Funding bug bounty programs kind of fail its objectives if they don't.
Re: EU to fund bug bounty programs for open-source projects
#30Excellent. Less free rider better public good.