this post was submitted on 30 Mar 2024
986 points (98.7% liked)

linuxmemes

20484 readers
1263 users here now

I use Arch btw

Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS
[email protected]
[email protected]
986
Debian security amirite? (lemmy.world)
submitted 4 months ago by [email protected] to c/[email protected]
75 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 48 points 4 months ago* (last edited 4 months ago) (1 children)

No, its the exact opposite.

Supply chain conpromise is a level of risk to manage not unique to FOSS. Ever heard of sunburst? It resulted in a lot of Microsofts cloud customers getting wreaked all because their supply chain was compromised.

Do people continue to buy into 365 and Azure? Yes. Without care.

So will this hurt open source projects? Not at all, in fact it will benefit them, highlight just why source code SHOULD be open source and visible to all! We would have had very little to no visibility and capability to monitor closed source. Let alone learn, improve and harden how projects can protect against this increasingly more common attack.

[–] [email protected] 15 points 4 months ago (2 children)

Yeah, I agree but I know some companies will have stupid thoughts like "a company employee is less likely to do that" or "at least we have an employment contract to back us up legally".

[–] possiblylinux127 13 points 4 months ago* (last edited 4 months ago) (2 children)

Until they are attacked...

Not to mention a lot of the time the "attack" is from the company themselves. Just look at the Meta malware as an example

[–] [email protected] 5 points 4 months ago (1 children)

the Meta malware

What is this?

[–] possiblylinux127 4 points 4 months ago

The VPN that performed a man in the middle attack to get data from other apps

[–] [email protected] 6 points 4 months ago

Ugh this reminds me of a guy I worked with, he used to be a trucker but became a software tester (he was also very religious).

Anyway he used to hate on open source software and call it open sores. According to him it was all amateur crap. Ugh I still hate that guy and it has been 15 years....