On Tue, Jul 7, 2026 at 2:53 PM CS Sushi Man via devel <[email protected]> wrote: > > On Tuesday, July 7th, 2026 at 15:23, Neal Gompa <[email protected]> wrote: > > > That mail went out at the very end of May, so it only existed for the > > month of June, which most people go for summer vacation or whatnot. It > > is entirely reasonable that nobody has seen it yet because of that. > > I would agree with you, if this was some ordinary OSS developer, > who is simply doing things during their free time. I don't know how > Freedesktop is organized, however, should an organization partially > responsible for the security of what could be millions of desktops, > take a month to respond to emails like this? Not to mention that > there was only *two* emails mailed during that month, so it would > presumably be very easy for XDG spec writes/maintainers to find > this email, if they were looking *at all.*
FreeDesktop's homepage indicates that it's composed of a "loose community of projects". To my awareness, it's not a staffed organization, it's just multiple projects with common goals working together on them. Those projects are composed of "ordinary OSS developers", like myself and everyone in this thread. > Is this organization severely understaffed? What exactly is going > on here? Who's responsible? What on earth happened? Life happened. People who develop software have lives to live outside of responding to emails by random people like me proposing massive overhauls to fix weird issues. There's nothing unusual happening that I can see. > The people around me don't usually go on vacation during June. > They're all busy working during this time. Maybe there is a > country/region that takes breaks during June, that I'm unaware of? > > I won't email on this thread again, since I'll be repeating > myself. However, I shall state my final personal verdict below. > > Wine is not the responsible party here. This vulnerability is the > result of *several* negligent decisions, made by numerous parties, > including Flatpak/Snap, Freedesktop, and GNOME/KDE. I presume that > these organizations are severely understaffed for the work that > they're doing, and that they lack the proper engineering > teams/volunteers at the right positions, to advise them at the > organizational level. (AKA ... they're being ran by a bunch of CEOs > and MBAs) I don't see how any of the decisions made here were negligent. In isolation, the way each part of the system works is intuitive and reasonable, they just combined in an unfortunate way. I don't see how the speculation about engineering and staffing resources is constructive. In any event, this is a distraction from the main topic of this thread. -- Aaron -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
