Earlier quoted context omitted.
IA32 is probably not getting all the focus from devs and users this days, still surprising whoever... Do you have a link to the issue, out of curiosity?
https://github.com/fingolfin/memmove-bug
EU to fund bug bounty programs for open-source projects
141–150 of 153 posts
Re: EU to fund bug bounty programs for open-source projects
#142Never heard about "Digital Signature Services (DSS), FLUX TL, midPoint, WSO2". Why were they chosen?
DSS is EU-owned library I believe. I used it instead reimplementing digital signature verification for XMLs, PDFs, hadling certificate revocation, etc. Makes sense that they want to secure own library that secures many other applications. WSO2 is Enterprise Service Bus that I used at another company (owned by government BTW) instead of one from whoever-makes-commercial-ESBs.
Re: EU to fund bug bounty programs for open-source projects
#143Earlier quoted context omitted.
The city of Munich tried to develop a Linux distribution "Limux" that was used for some time, but political considerations ultimately reversed the decision. https://en.m.wikipedia.org/wiki/LiMux
Munich did that, but they didn't do the second part of parent's suggestion: "and they invested it in an open source office suite..." Surely most of the problems with the opensource tools they were using could have been resolved by helping the opensource projects fix bugs.
They way the decision came into play is crazy however. Just around the elections Microsoft moved their German headquarters from outside the city into the city and the next elected deputy mayor from the conservative party was disappointed that it took much time to get an official mobile phone from the IT department and setting up mail on that device was complicated ... not idea how that's related to desktops, but that triggered the debate ...
Re: EU to fund bug bounty programs for open-source projects
#144Earlier quoted context omitted.
I don’t see your issue with PHP. It’s a fairly good language to work with still. The fact that it’s often used by morons doesn’t make the language terrible (though most morons are now migrating to node.js).
I have no idea how the development of the PHP language works, but most languages are supported by their community, no? The amount of morons contributing the language tends to scale linearly with the amount of morons using it. Also, I'm sure most of this has been fixed, but it sure sounds like a terrible language... https://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/
There’s better solutions to almost all of those issues now though.
Re: EU to fund bug bounty programs for open-source projects
#145Earlier quoted context omitted.
> the optional malware you get during FileZilla's installation. Think that through. The malware that comes with FileZilla is often reported to be pretty bad. Agreed, potential a 0 day (especially when targeted) could also have a really bad effect. But Filezilla's malware isn't theoretical, so could really be the bigger problem.
I haven't used Filezilla in a _long_ time -- is the malware optional? I imagine that most EU governments image their machines, so they IT departments likely aren't installing the malware. And there is also the consideration that governments will continue to use Filezilla even if there isn't EU funding to make it more secure -- malware and all.
Re: EU to fund bug bounty programs for open-source projects
#146Earlier quoted context omitted.
It's it? I try to use open source software as much as possible but Office365 is just significantly better than the alternatives. I wish it wasn't true but it is. And it's not even that expensive. £8/month/person. Slack is £5/month/person and that's just for chat. Considering an average employee probably costs at least £3000/month it's a bit silly to worry about these small expenses.
Slack has many competitors. You can replace it. Does MS Office have real competitors? Google Docs is very casual compared to MS Office. LibreOffice needs a lot of work. My money was on Corel Office for Linux (with solid products like Wordperfect and Quattro Pro), but Microsoft bought a large share of Corel and it was mysteriously discontinued.
It's quite surprising given how relatively simple it is.
Re: EU to fund bug bounty programs for open-source projects
#147So now the game for developers is to include intentional but sufficiently abscure bugs that they can harvest money off down the line.
I don't think developers would be eligible for bounties for vulnerabilities found in their own projects.
However, such a limitation is rather easy to workaround. Which means now, buggy commits are going to look suspicous.
Re: EU to fund bug bounty programs for open-source projects
#148Earlier quoted context omitted.
Since LibreOffice 4.5ish I have preferred both writer and calc. Feels more robust and consistent + a lot snappier (incl. starttime). I only use it for collaborative editing of docx and xlsx.
Were you using it for documents in English? Because I don't know about German specifically, but with some languages, Libre office is very buggy.
( star office -> open office -> libre office )
Re: EU to fund bug bounty programs for open-source projects
#149Earlier quoted context omitted.
Also, VLC has a huge attack surface - binary parsing is difficult to do right in C / C++. I hope this effort makes the crashes less frequent...
Is mpv [0] better in this regard? 0: https://mpv.io/
Re: EU to fund bug bounty programs for open-source projects
#150Earlier quoted context omitted.
Thats a nice way of putting cronyism, lobbyism and tech-iliteratism.
That's true, there was cronyism. For example, they used the worse, slower KDE instead of better options like MATE because KDE has a considerable European (and even German) legacy. I imagine they took many decisions like that. Take a computer that used to run Windows 2000 and install KDE on it, it's no wonder people got pissed and they had to revert their decision.