Growth in Open Source Leaves Government Exposed to Vulnerabilities

Government Technology: Microsoft’s announcement Monday that it is acquiring massive open source platform GitHub for $7.5 billion is expected to have little impact on reducing the sharp rise in open source vulnerabilities and improving their time to discovery. That’s not good news for governments as they increasingly embrace open source.

“Microsoft’s acquisition will undoubtedly further improve the already good security of the GitHub platform. However, it won’t naturally change — for better or worse — the security of the open source projects itself (that use the platform). This is an area where the community, as a whole, needs to own security, not any corporation,” said Guy Podjarny, CEO of security firm Snyk.

Read article