throwphoton
Joined 6 years ago
Joined 6 years ago
It could impact them differently if they contract it again.
Which is why it's a distraction to even consider this particular person's track record.
Even if this same person pulled one critical package a month for the next year, the fundamental problem is still that the ecosystem in general relies on parties with no obligations to manage critical dependencies.
Does this mean that you think the risk of serious morbidity or mortality is overestimated, or because you think at some point the reduction in social interaction is worse than the pandemic itself?
> Google Buzz publicly disclosed (on the user's Google profile) a list of the names of Gmail contacts that the user has most frequently emailed or chatted with.
Google Buzz is something you definitely don't want to be similar to.
Moreover the cloud providers should make it harder for an uncontrolled "block of architecture" to accidentally spend too much money. The focus seems to be on "always available", but depending on how fast it's spending your money, it might be better if it crashed.
Expanding further, perhaps each "block of architecture" should have a separate LLC dedicated to it to control billing liability. Incorporate your "lambda fanout" to keep it from bankrupting your "certificate manager" when it goes haywire, and let it go out of business separately.
Any information provided without a clear understanding that it would be made public should not now be made public by default, even if it is just a name and some badges.