Tweet · 20 May 2018, 14:43 UTC

Replying to @null and @SimonDeDeo, @matthewstoller, @joftius

For corporate users of open source, yes, this does lead to a responsibility to check that they’re using good stuff. But again, it will boil down to specifics. If your whole data rights strategy hinges on a broken anonymising function that you didn’t check, you’re toast.