Talking Trojan: Analyzing an Industry-Wide Disclosure

Talking Trojan: Analyzing an Industry-Wide Disclosure tells the story of what happened after we discovered the Trojan Source vulnerability, which broke almost all computer languages, and the Bad Characters vulnerability, which broke almost all large NLP tools. This provided a unique opportunity to measure software maintenance in action. Who patched quickly, reluctantly, or not at … Continue reading Talking Trojan: Analyzing an Industry-Wide Disclosure →

academic papers disclosure industry open source security programming-languages security security economics security engineering trojan trojan source vulnerability