Comment Re:I find it odd (Score 2) 244
If the bug is in SQLite's code it isn't really your bug now, is it?
When a bug is in a library you link with, you should warn your users of it and file a bug report if it's a bug that hasn't been fixed yet. If a new version has been released that fixes said bug, you update your program to use the new version. A developer can't be expected to be responsible for each and every bug in every library he uses in his program, but he should be held responsible for warning his users and updating his program to the newest versions of the libraries.
Google, while being a tad bit arrogant about it, is not the owner of the exploit if the exploit comes from the flash plugin. Their responsibility right now is to file bug reports with Adobe, warn their users about said exploit, and keep improving their sandbox to strengthen their defences... Not that I think Adobe would ever be able to fix the piece of junk they call Flash, but blame should be put where it is deserved.
When a bug is in a library you link with, you should warn your users of it and file a bug report if it's a bug that hasn't been fixed yet. If a new version has been released that fixes said bug, you update your program to use the new version. A developer can't be expected to be responsible for each and every bug in every library he uses in his program, but he should be held responsible for warning his users and updating his program to the newest versions of the libraries.
Google, while being a tad bit arrogant about it, is not the owner of the exploit if the exploit comes from the flash plugin. Their responsibility right now is to file bug reports with Adobe, warn their users about said exploit, and keep improving their sandbox to strengthen their defences... Not that I think Adobe would ever be able to fix the piece of junk they call Flash, but blame should be put where it is deserved.
