Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The (current) last commend by hakavlad (same as hakavlad on HN perhaps?):

    @HACKERALERT Your decision may be somewhat irresponsible towards those who donated to the audit.
That audit was one year ago. The money didn't go towards the author. The source continues to be available. The author doesn't own you zilch.


Yes, I found this a profoundly weird comment. The audited code will be forever available and audited.


Human beings are weird, and donations aren't always based on reason. I say it's better to discuss the feelings than worry about disapproval.

Surely a recent audit only increases the odds of someone assuming responsibility for a fork. Knowing there is a solid baseline to proceed from.


>The money didn't go towards the author.

Perhaps many would have refused to donate if they knew that the project would be archived in a year. Collecting for audit and then archiving the project is, in a way, a violation of expectations.


Did they perform the audit? That is what is important.

The more and more you start modifying code after the audit, the more and more useless the audit becomes.


> That is what is important

Depends on your perspective... If I'd known the project was going to stop soon after I donated, I probably wouldn't donate, even if the purpose of the money was strictly for an audit.


Yes, they performed.


Did the author do the audit? Is the audit available? If so, then they did what people donated for. End of story.


Would they have refused to donate if they knew the author would be hit by a bus in a year? Or hired by someone who refused to allow them to continue working on it?

I don't think the author had explicit plans to do this a year ago.


What are expectations? Audit is invalidated by the first change after it, so archivation is basically necessary. VeraCrypt was audited too, lol.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: