Re:Nix as OS X Package Manager
by bjt on Wednesday May 25, 2016 @07:20PM
(#11773959)
This is the biggie for me. When the next heartbleed comes out, it would REALLY suck to be running a bunch of opaque images that you have no idea how to patch.
[ Parent
| on HN ]
That's the thing, I surprised how many people were "ok" with that binary imagine that someone built on their laptop. Few saw an issue with it, and instead praised it as a great win.
I mean, it was a win, not having to untangle the hairball of rpm/deb dependencies. I like that part too. But not understanding the downside was what shocked me. It was like everyone drank the magic kool-aid potion.
> I surprised how many people were "ok" with that binary imagine that someone built
Really? This surprises you?
The gross majority of the world runs software this way.
The real issues are quality control and release process.
That's an unrelated problem. Developing your systems interactively, instead of reimplementing them over and over again produces the same results, just faster. If your servers aren't ephemeral, or you only have "one machine", or if you don't know about heartbleed patching, then you're going to be fucked anyway.