>easy auditable - TinySSH has less than 100000 words of code Is approximately one hundred thousand words really easily auditable?
Seems like the wrong question. Rather: if it's easily auditable, who's audited it so far?
TinySSH is a small SSH server using NaCl, TweetNaCl
51–60 of 128 posts
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#52Is NaCl still a thing? Genuine question as I've not heard it mentioned in years. [edit added] For those, like me, who thought this was using Google's NaCl (sandboxed C++), it's actually using Daniel Bernstein's NaCl (cryptography library).
[deleted]
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#53The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
Is that necessarily a bug? If you use Disney content without a license they won't give you a 30-day period to keep mis-using it. Same with using Oracle software. Why should people who create CC content provide such a grace period?
For the reason given by Doctorow in the linked article:
If you put a CC license on your work, its explicit message is, “I want you to re-use this.” Not “I am a pedantic asshole with a fetish for well-formed attribution strings.” The point of CC is not to teach the world to write attribution strings: it is to facilitate sharing and re-use. If you are a good-faith user of CC licenses, then your response to an incorrect attribution string should be a request to correct it, not a threat to sue for $150,000 in statutory damages.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#54The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
[deleted]
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#55The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
[deleted]
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#56The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
Not for that reason. The copyleft trolls that Doctorow wrote about are using a termination clause in attribution-required CC licences. (Remember, there are lots of different CC licences with varying requirements on licensees.) CC0 doesn’t impose requirements on licensees nor does it have a termination clause, so it isn’t affected by these trolls. However, CC0 is not good as a software license. It is explicitly restri…
I copied your comment to https://github.com/janmojzis/tinyssh/issues/85
If author/maintainer doesn't frequent HN, perhaps discussion there might get some action.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#57Is NaCl still a thing? Genuine question as I've not heard it mentioned in years. [edit added] For those, like me, who thought this was using Google's NaCl (sandboxed C++), it's actually using Daniel Bernstein's NaCl (cryptography library).
[deleted]
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#58Cool but something i saw that was weird, this may be the first repo i've ever seen to advertise ... words of code, i've always seen secure repos advertise their "in only X LOC" seeing words of code as a metric was funny
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#59Cool but something i saw that was weird, this may be the first repo i've ever seen to advertise ... words of code, i've always seen secure repos advertise their "in only X LOC" seeing words of code as a metric was funny
It's unusual, but IMO makes sense, as it encapsulates complexity better than LOC do, because the latter are more sensitive to formatting preferences etc.
Books are also measured in words too (also for category thresholds, e.g. between a novella and a full novel), so there's precedent too.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#60The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
Not for that reason. The copyleft trolls that Doctorow wrote about are using a termination clause in attribution-required CC licences. (Remember, there are lots of different CC licences with varying requirements on licensees.) CC0 doesn’t impose requirements on licensees nor does it have a termination clause, so it isn’t affected by these trolls. However, CC0 is not good as a software license. It is explicitly restri…
0BSD and MIT-0 don't mention patents explicitly though, few licenses do. I only know of two: https://blueoakcouncil.org/list