On 9/13/2022 12:36 AM, to...@tuxteam.de wrote: > On Mon, Sep 12, 2022 at 03:32:27PM -0400, Michael Stone wrote: > > > [...] "I can't get personalized/dedicated support with enforceable > > SLAs for free"
If the requirement that maintainers and developers of free/oss software must actually fix the bugs reported to them is not enforced, then free/oss software *is* vulnerable to all kinds of malicious activity by the "volunteers" who create the free/oss software. > > Had I a printer, I'd print out this, frame it and hang it on the > wall. This makes the point very nicely :-) > > Cheers Yes, it is true, no one should use Debian or any software maintained by totally unaccountable "volunteers" for any mission-critical purpose without also hiring someone with the time and expertise to do what is necessary to make such software secure and bug-free for the intended purpose of the software. That is, users must *not trust* the volunteers who maintain and develop Debian software to act in the interest of the user. These "volunteers" obviously have other, possibly malicious, interests if they prove themselves unwilling to apply fixes to bugs that are reported to them. Thanks for clarifying that fact. Best regards