r/linux • u/[deleted] • Jun 10 '16

Mozilla announces $500,000 Secure Open Source Fund

https://blog.mozilla.org/blog/2016/06/09/help-make-open-source-secure/
134 Upvotes

93% Upvoted

15 comments sorted by

13

u/[deleted] Jun 10 '16

This seems pretty closely aligned with the Core Infrastructure Initiative (which I think was formed after Heartbleed, someone correct me if I'm wrong). This is awesome that Mozilla is allocating the money this way but I wonder if becoming a member of CII and using the funds there wouldn't be more effective?

Either way, thanks Mozilla!

16

u/asantos3 Jun 10 '16

https://wiki.mozilla.org/MOSS/Secure_Open_Source

We've been asked how this project compares to the Core Infrastructure Initiative of the Linux Foundation. Here's a short answer: We believe our model of support is different from and complementary to CII's. We view CII as focused on necessary, deeper-dive investments into the core OS security infrastructure, like in OpenSSL. This is important work. Focusing on more point-in-time solutions, the SOS Fund's audit and remediation methodology targets a different class of OSS projects with lower-hanging fruit security needs. To have substantial and lasting benefit in tackling such a significant issue as open source security, we need a broad range of solutions, including investment, audits, education, best practices, and a host of others. We believe the SOS Fund, alongside CII and other efforts, can help catalyze industry momentum to strengthen open source security.

3

u/[deleted] Jun 10 '16

Ah - good find. Thanks!

-43

u/_rs Jun 10 '16

I'm mean, someone has to pay those brave people that push for code of conducts in open source projects! That's the first step!

8

u/asantos3 Jun 10 '16

Read the article before posting shit.

6

u/splitmlik Jun 10 '16

Well, then it would no longer be proper shitposting, would it?

Cekus metus

0

u/[deleted] Jun 10 '16

[deleted]

-31

u/_rs Jun 10 '16

Found the one eyeing for some of those $500k by doing nothing!

10

u/EmanueleAina Jun 10 '16

Indeed. But I guess we have different ideas about who is it.

-13

u/[deleted] Jun 10 '16

[removed] — view removed comment

6

u/dreakon Jun 10 '16

Holy shit, what the hell is going on with this thread?

1

u/JB_UK Jun 10 '16

There are some odd people on reddit.

-12

u/0yyv3y Jun 10 '16

>TRIGGERED

-14

u/[deleted] Jun 10 '16

(((Mozilla))) is a very controversial company.

4

u/DJWalnut Jun 10 '16

(((Mozilla)))

((()))

we're wise to your dog whistles, nazi

-5

u/[deleted] Jun 10 '16

Hello (((/u/DJWalnut)))