I am just disappointed with the slow migration to a different model based on commercial concerns rather than technical
-
-
Replying to @AndreaBarisani @nxsolle
and the apparent mismanagement of at least 2 security bugs in my mind, again I find the all != OSS dissertation as indelicate
1 reply 0 retweets 0 likes -
Replying to @AndreaBarisani
I am not against OSS. I just don't want people to assume OSS == more secure. Assurance can be built without opening source.
1 reply 0 retweets 0 likes -
Replying to @nxsolle
yes, I disagree on the opposite "There is an inverse relationship between making a chip open and achieving security certifications"
1 reply 0 retweets 0 likes -
Replying to @AndreaBarisani @nxsolle
that is a quote from the post, their initial OSS use is being reversed, somwehat criticized and it was poorly managed to begin with
1 reply 0 retweets 0 likes -
Replying to @AndreaBarisani
Not really a reversal. No yubikey source has ever been open AFAIK. The applet loaded on Neo was badly managed 3rd party OSS.
2 replies 0 retweets 0 likes -
Replying to @nxsolle
incorrect, they took ownership of their fork https://github.com/Yubico/ykneo-openpgp …
1 reply 0 retweets 0 likes -
Replying to @AndreaBarisani
They forked an OSS project and kept their fork open. PGPCard functionality in YK4 is unrelated code. Clearly stated in blog.
1 reply 0 retweets 0 likes -
Replying to @nxsolle @AndreaBarisani
Just because a new product has same function as old one doesn't mean you have a moral obligation to open source code.
2 replies 0 retweets 0 likes -
Replying to @nxsolle @AndreaBarisani
Opening just the PGP parts of YK4 code doesn't make sense as they can't be independently verified == no added assurance!
1 reply 0 retweets 0 likes
we are going in circles and you are not getting my point at all, EOL.
-
-
Replying to @AndreaBarisani
Yeah, we are probably also arguing different points. Happens on twitter all the time. Buy you beerrrrrrr next time we meet.
0 replies 0 retweets 0 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.