Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Or they won't.


This precedent suggests they will:

https://en.wikipedia.org/wiki/Heartbleed#Root_causes,_possib...

The industry's collective response to the crisis was the Core Infrastructure Initiative, a multimillion-dollar project announced by the Linux Foundation on April 24, 2014 to provide funds to critical elements of the global information infrastructure.[192] The initiative intends to allow lead developers to work full-time on their projects and to pay for security audits, hardware and software infrastructure, travel, and other expenses.[193] OpenSSL is a candidate to become the first recipient of the initiative's funding.[192]

After the discovery Google established Project Zero which is tasked with finding zero-day vulnerabilities to help secure the Web and society.[194]


Everything can happen, but your scenario has a very low probability, incentives do work




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: