I've been wanting something like this for years. It's simply impossible for millions of companies to individually review the thousands of updates made to their thousands of dependencies every day.
Imagine a world where every software update has hundreds of signoffs from companies across the industry. That is achievable if we work together. For only a few minutes a day, you too can save a CVSS 10.0 vulnerability from going unpatched :)
Because making every jet engine in two different models would make them a lot more expensive. It would also cause maintenance issues because of non-interchangeable parts.
https://www.bbc.com/news/articles/c8d70d912e6o indicates that the recently announced breach was separate from the one in May (for which the attackers were arrested in July?). I think the one in May leveraged CVE-2025–31324.
> Because Wikipedia was under a Creative Commons license, anyone who didn’t like the way the project was run could copy it and start their own, as a group of Spanish users did when the possibility of running ads was raised in 2002.
If I remember correctly, the licence change was achieved by the FSF releasing a special version of the GFDL allowing the change, taking advantage of the "any later version" part of the original licence.
OpenStreetMap's licence change was much more difficult. Agreement had to be sought from all editors and for the few that didn't respond their work was removed. We actually replaced the work of most non-responders before the licence change though.
That's a nice chunk of change, though low enough that a few friendly billionaires could put some pocket change into a trust today and make up for this funding in perpetuity. And there undoubtedly will be a massive surge in donations from small donors in response to this.
As long as the bigger fish are willing to subsidize the smaller rural stations, I don't think there is anything to be afraid of.
The removal of this Sword of Damocles is in my opinion a great thing for PBS and NPR.
A few friendly billionaires could have funded them entirely for the last 60 years. I see no reason to think that they suddenly will now. Many stations will be closed, and people will lose out on valued programing.
Imagine a world where every software update has hundreds of signoffs from companies across the industry. That is achievable if we work together. For only a few minutes a day, you too can save a CVSS 10.0 vulnerability from going unpatched :)
reply