News for hackers. Stuff that matters.

A comment on How we built a serverless architecture with AWS. Parent comment

Re:How we built a serverless architecture with AWS by rapsey on Friday July 12, 2019 @12:39AM (#20418217)
Because you will inevitably have hundreds/thousands of dependencies, controlled by at least as many people, anyone of which could inject code to backdoor your server.

A supply chain attack will sooner or later be the cause of a major incident.

[ Parent | on HN ]
Re:How we built a serverless architecture with AWS by holoduke on Friday July 12, 2019 @02:30AM (#20418721)
It's the same for any other language . With java with c++, dot net, PHP and even with Erlang. None of them force you to use governed central repositories. And that's a good thing.
[ Parent | on HN ]
Re:How we built a serverless architecture with AWS by rapsey on Friday July 12, 2019 @02:49AM (#20418796)
The scale is on a different level however. Your average node project will have 10/100x as many dependencies compared to other languages. Too many to conceivably check. Also due to how dynamic the language is, I think it is way easier to hide something.
[ Parent | on HN ]