A flaw in the GRUB2 bootloader allows hackers to bypass Secure Boot on billions of systems

Most people are not developers. Of the developers using open source I would say a significant amount will be contributing back to open source projects. I have done this for numerous open source projects I have used when I found a bug or missing feature. Did I get paid for this work? My employer pays me to get my work done so indirectly yes. But I would do the same for any personal project that had the same blocker. The issue is most users don't have the skills required to contribute source code fixes or improvements.
 
Back