> It's nice that Microsoft is admitting that the open-source approach is the right one for security -- something I and other open-source advocates have been saying for decades. But, inner source isn't the same thing as open source.

I thought this was common knowledge, but in a previous related thread my comment saying the same was downvoted with some replies about how MS engineers are security gods or some such. Interesting to contrast mainstream tech coverage with HN's RSU echo chamber.