Lettuce eat lettuce

Always eat your greens!

  • 0 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: July 12th, 2023

help-circle
  • First off, good on you for being careful. Ultimately, use the same methods that you would use when vetting other sources, like academic or personnel for hiring.

    Check reputation via stars, active contributors, see what accounts are contributing and what other projects they also contribute to. Check their LinkedIn profile and personal websites.

    See if you can confirm the project is being used safely by reputable groups. See if people, especially public people you trust are using/recommending it without being sponsored.

    Check in private forums with other devs and users, see what people are saying. Check the code yourself, etc.

    Ultimately, there’s no way to know 100%, even large companies and organizations have been duped in the past by backdoors or security bugs in OSS they use. You can be very confident however, it’s all about how much investigation you are interested in doing.

    And of course, don’t ever put all your eggs in one basket.

    And if after lots of investigation, you still have a bad feeling in your gut, listen to that. Better to be a little too careful than to compromise yourself by ignoring that gut feeling that something just doesn’t pass the smell test.




  • Anything to regulate and restrict the people/end users but not address any real problems in society.

    Go after the gun companies, gun lobbies, NRA? No, never. Address housing, income, and educational inequality? That sounds complicated, tough, and expensive.

    This has similar vibes to shaming/regulating people for using too much water in their showers and for washing their cars, but when a multi-billion dollar oil company spills millions of gallons of crude into the sea causing years of environmental damage due to negligence, fine them a few million dollars and tell them they’ve been very naughty…

    So tired of politicians being in the pocket of Capitalist scumbags.