Devs unknowingly use “malicious” modules snuck into official Python repository

Re:Devs unknowingly use “malicious” modules snuck into offic... by mrmondo on Monday September 18, 2017 @02:17AM (#15273740)

Debian security are very good at their job indeed, however so many of the packages are so old they’re not usable, furthermore Debian doesn’t enable SELinux by default and has a number of policies missing which significantly weakens the average deployment.

[ Parent | on HN ]

Re:Devs unknowingly use “malicious” modules snuck into offic... by cassowary on Monday September 18, 2017 @02:32AM (#15273794)

Those comments are all irrelevant to the OP's point. Debian software is "old" by intention; it is part of the spec that it shouldn't be a moving target.

As for Debian making some policy decisions that you disagree with, it's very different for Debian to make decisions than for NPM to make decisions. There's just no comparison.

[ Parent | on HN ]

Re:Devs unknowingly use “malicious” modules snuck into offic... by jacalata on Monday September 18, 2017 @03:23AM (#15273968)

I agree that Debian is so different to npm as to make any comparison irrelevant, but you should direct that at the comment which introduced the comparisons, not one that pointed out ways it doesn't work to compare them.

[ Parent | on HN ]

Re:Devs unknowingly use “malicious” modules snuck into offic... by mrmondo on Monday September 18, 2017 @03:37AM (#15274017)

Indeed, sorry if I didn’t make it clear - I was commenting on the previous person who talked about Debian - not the OP.

[ Parent | on HN ]