undefined | Better HN

0 pointsmystraline8mo ago0 comments

Governments should have access to all the source of code they buy licenses to (and provided at sale), as a precondition of selling to a government.

When these sorts of things happen, the source can be subpoena'd with the relevant legal tool, and reviewed appropriately.

Why governments don't do this is beyond me. It greatly limits liability of gov procurement, and puts the liability on the companies selling such goods.

0 comments

gnfargbl8mo ago

Governments don't do get source code for the same reason as every other customer doesn't get source code: software vendors are incentivized to refuse the request.

Why are the vendors so incentivized? Well, coming back to Fujitsu and the Post Office, the answer is that refusing to share the source was worth about a billion dollars: https://www.bbc.co.uk/news/articles/cgm8lmz1xk1o

ChromaticPanic8mo ago

This is why it's unethical for governments to use closed source software. Anything related to government functioning should be auditable.

flir8mo ago

Then they shouldn't get the contract.

I hope lessons are learned, but I doubt it.

daveoc648mo ago

Governments (certainly in the UK) aren't willing to pay enough to make this work for vendors.

An escrow approach is quite common to protect the government in the event of a vendor going bankrupt or similar.

varispeed8mo ago

> Why governments don't do this is beyond me.

Brown envelopes most likely and de facto non functioning SFO.

j / k navigate · click thread line to collapse