then it is up to community to fork the project if they find it valuable and can ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

throwaw12 29 days ago | parent | context | favorite | on: Curl will not accept vulnerability reports during ...

then it is up to community to fork the project if they find it valuable and can convince people migrating to their fork.

many engineers actually work that way, right? We are employed for 12 months and give our availability fully to the company and we get salary for it, why isn't it allowed to others?

londons_explore 29 days ago [–]

A fork of a project that does security patches only is an interesting idea...

Since then a diff of the two projects will be a perfect list of security issues and will make designing an attack rather easy...

bluGill 29 days ago | [–]

Only until the next feature lands in upstream, likely accompanied by some refactoring.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact