[BlueOnyx:24871] Re: FreeBSD 13 and pfSense drama (Off-Topic)

[Ken Hohhof]

OK, true, this doesn't reflect well on Netgate.

The fact that the guy is an ex-con makes for a good headline, but is perhaps
somewhat irrelevant to the story.  Here in the Chicago area we used to have
a hot dog place named "Felony Franks" that employed ex-cons.  I wonder which
is more worrisome, having felons cook your food or write your code?


-----Original Message-----
From: Blueonyx <blueonyx-bounces at mail.blueonyx.it> On Behalf Of Michael
Stauber
Sent: Sunday, March 28, 2021 12:39 PM
To: blueonyx at mail.blueonyx.it
Subject: [BlueOnyx:24870] Re: FreeBSD 13 and pfSense drama (Off-Topic)

Hi Ken,

> The lesson of the article seems not to be that the convicted felon 
> wrote bad code (although he did), but that open source code being safe 
> because it is reviewed by the community is a myth.

There are quite a few lessons to be drawn from this. I'm more puzzled at
Netgate kicking pfsense 2.5.0 out of the door with this garbage included and
then having the audacity to yell at FreeBSD "You published zero-day-exploits
for our product!" when FreeBSD replaced the buggy code. :p

That's a real classy act.

And no: "reviewed by community" has always been a myth or is at least way
overrated. Usually nobody looks at pre-release code unless they have to for
very specific and narrow reasons.

--
With best regards

Michael Stauber
_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx