Lack of staff and funding likely led to the recent PHP security snafu; project has only one full-time employee, but that's just the tip of the iceberg — a dreary situation caused by services running old versions with no support
www.tomshardware.com
Never underestimate the power of complacency, the destroyer of internets.

70% of the world’s internet btw, but out-of-support deployments and little funding for permanent staff to manage the open-source project.

  • goferking (he/him)@lemmy.sdf.orgEnglish
    11·
    17 hours ago

    Reminds me of an old coworker who couldn’t understand why an open source project wouldn’t care about his request when we had support contract with the company that consumed the project.

    we pay for support why won’t they code in my request

    (note request was then wanting to do something that was supported already but not in the way they wanted it implemented)

    Or honestly better comparison is Microsoft and ffmpeg

    The xz fiasco has shown how a dependence on unpaid volunteers can cause major problems. Trillion dollar corporations expect free and urgent support from volunteers.

    @Microsoft @MicrosoftTeams posted on a bug tracker full of volunteers that their issue is “high priority”

    https://x.com/FFmpeg/status/1775178803129602500