Comments on the use of Open Source

After the devastating vulnerability in Log4j last month we’ve seen some changes in how companies view open source. The ones whom previously had no policies at all have now began looking into this. For now the main thing we see is asking the question about where Log4j has been used, but that will likely change to. It is important for all the users of open source to understand the nature. You cannot just expect or pressure the maintainers to update their software. Especially not if you use something with a small group of maintainers or being maintained in the spare time. Instead you have to get into the open source mindset and take advantage of the fact that everything is open. This means that anyone can read the code, and if needed create a fix. If a company decides to use free open source software they cannot expect the same level of service as if they bought a commercial product, but instead be ready to either wait or do the work themselves. ...

January 6, 2022 · 2 min · Oskar Edbro

Something Needs to Change about All These Agreements

The end of the year draws closer, and for many so does the stress of preparing for the holidays. Many are buying gifts, and the companies know it, and therefore the amount of pure ads in my inbox sky rocket at this time. But there are also other communications, I’m talking about the many updates to terms from companies. ...

December 4, 2021 · 3 min · Oskar Edbro

Privacy Policy Review: Apple

When looking at the communications of the major players in the operating system market (for both computers and smartphones) there are one company that repeatedly talks about privacy more than the others. The company I am thinking about is Apple. Their continuous talk about privacy got me curious, how do they handle their users privacy. And when curious it’s time to investigate, so I dug into their Privacy Policy (Updated June 1, 2021), and my thoughts resulted in this blogpost. ...

June 16, 2021 · 2 min · Oskar Edbro

Hacking is not a crime, or is it?

I’ve lately seen multiple bug bounty hunters on twitter (and other platforms) proudly exclaiming that hacking is not a crime. They are not wrong, but I think the answer needs to be a bit more nuanced. So here is my take on hacking. Hacking is not inherently a crime, but neither is it automatically never criminal. I would compare it with lighting a fire. There are instances where it is helpful and legal (eg. lighting a campfire), but there are at least as many ways of doing it illegally (eg. burning down a building). The act of lighting a fire can be good or bad, legal or illegal, ethical or unethical. Everything depends on how you do it. ...

February 11, 2021 · 2 min · Oskar Edbro