Hacker News new | ask | show | jobs
by LukasReschke 3674 days ago
Good questions! Note, that I'm affilated with Nextcloud so obviously a bit biased.

Only because a project is very transparent about security vulnerabilities does not necessarily mean it's inherently insecure. In fact, at ownCloud we found all critical vulnerabilities ourself and also run a successful bug bounty program. (for Nextcloud we are also considering one)

Check https://news.ycombinator.com/item?id=11821854 for more insights.