A fuzzy issue of responsible disclosure
A fuzzy issue of responsible disclosure
Posted Aug 25, 2022 2:16 UTC (Thu) by milesrout (guest, #126894)In reply to: A fuzzy issue of responsible disclosure by NYKevin
Parent article: A fuzzy issue of responsible disclosure
You've made a classic error: confusing the question of what people are *legally entitled* to do with free software and the question of what is appropriate and acceptable conduct in the free software community. Nobody makes this mistakes any more with forks: the ability to fork is one of the four freedoms *explicitly*, but it is also regarded by most as hostile---a last resort, when friendly communication has broken down. Why, then, knowing this, do people continue to confuse these two completely different things?
Nobody is saying anyone is *legally prohibited* from fuzzing free software. The discussion is not even about fuzzing, it is about *communication* of the *results* of fuzzing, and how it can be done in a way that does not cause burnout and frustration from developers, while recognising that fuzzers are reporting bugs, which is something that, at least in the abstract, ought to be encouraged.
