• 0 Posts
  • 29 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle

  • Three streaming (like pointed in the other comment) was my initial reaction too, but indeed at the time https for streaming would be very rare.

    Another possibility is to realize that openssl isn’t just for communication, but also has implementation of cryptographic algorithms.

    Perhaps openssl was used for validation of licensing key? For example they could sign the license with their private key and WinAmp could verify it’s authenticity with its public key.





  • Yes, thanks for pointing it out. As long as it is some organization that can’t be bought it should be fine. I didn’t included that because it makes my response more confusing.

    Essentially CLA gives the entire copyright to specific entity and that entity in case of FSF it likely could use it for fighting violations, while some startup likely intends to change license when their product gets more popular to cash out on it (for example what Hashicorp did recently before selling to IBM)









  • There is a saying that if civil engineers would build houses the same way as software engineers build software, the first woodpecker would destroy the whole civilization.

    In reality it is not easy to build good software and it can be fragile even with good practices. This approach allows anyone’s code merged without much supervision.

    Another thing is (and I even noticed myself doing it, even though normally I think of myself as perfectionist) is that when one contributes a feature to a project that they don’t maintain. They just think only about the feature and the easiest way of implementing it, which isn’t necessarily the best way to implement something long term, adding complexity, makes harder to add more features and much easier to accidentally create bugs.

    Third, preventing security vulnerabilities is hard even with good practices, someone could accidentally (or purposely) introduce a security vulnerability.