Who should be liable? The person who sells you the software? Or the person who p... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

bastawhiz on June 26, 2025 | parent | context | favorite | on: Libxml2's "no security embargoes" policy

Who should be liable? The person who sells you the software? Or the person who put some code on GitHub that the first guy used?

pjmlp on June 27, 2025 [–]

In principle the guy that sells the software, that is why now SBOMs (Software Bill of Materials) are a thing in security assessments.

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact