This is an automated archive.

The original was posted on /r/opensource by /u/WonderlinkDotCo on 2023-09-02 06:11:49+00:00.

I have setup a GitHub discussion (github.com/usebrainpick) on this very topic. Some references before we start.

  1. This triggered the discussion
  2. If you think the current situation is OK, read this paper
  3. Another case that points out inefficacy of the current model
  4. One more to add to above
  5. Paywalled (From Google cache )
  6. (the first issue they looked at was Log4j vulnerability)

Please join the discussion, let’s learn everybody’s view on this topic. Maybe we shall come up with some new ideas?