Hacker News Reader

That's not an open source problem, though; that's a supply chain problem. Some random little proprietary freeware isn't better.

View on HN

Semantics, but yes.

The problem isn't the open source (in fact, that's better). The problem is downloading random shit from the internet, and the biased assumption that open-source == trustworthy.

Open source does not equal trustworthy, but open source repositories usually are trustworthy, because they're trusted repositories.

Debian repos are not NPM. Yes, the package are actually vetted to some degree.

exactly. I remember there was a case where louis rossman covered a repair tool that was hacking its customers if they did something the developer didnt like.

At least with open source you have a chance to prevent this. With proprietary its pure trust.

And then there was Gaggiaino that was intentionally bricking displays if you tried to use your own. A project with open source roots.

It can happen anywhere, really

Reply on news.ycombinator.com