Kevin Karhan :verified: (@[email protected])

@[email protected] @[email protected] I disagree, as all such #SupplyChainAttacks are merely based upon lack or #reviewers and lack of #funding. - Whereas with #CCSS you have no independent auditability as with #FLOSS and *everything* is a *"#TrustMeBro!"* approach, which *ALL* the #GAFAMs, #PRISM-Collaborators, #CloudAct subjects and willingful #Govware integrators have forfeilt by their actions! Not to mention it's easier and faster to fix #FOSS as well as the #diversity of systems mitigate said issues (i.e. #dropbear was affected by *neither* #RegreSSHion #XZ's #backdoor, likely preventing another #Mirai-Style #Botnet from being created... - Instead of shoving money into buying #CSS Governments should instead provide proper fundibg to #OSS, instead of wasting it on #HypeBasedDevelopment / #BuzzwordDrivenDevelopment like #Zensursula's @[email protected] does with garbage like *"#AI"*... After all, these issues are systemic, and denying the root cause is turning a blind eye at the obvious fix!