Re:Japan to fund firms to shift production out of China
by xamuel on Thursday April 09, 2020 @02:48PM
(#22825861)
We could easily imagine that suddenly it is revealed that React contains some super-well-hidden malware that phones home to Facebook, and that's been built into React since early versions. As doubtful as that sounds, it's actually not unlike recent scares about China embedding secret transmitters deep inside of circuitboards, etc.
[ Parent
| on HN ]
Re:Japan to fund firms to shift production out of China
by TeMPOraL on Thursday April 09, 2020 @02:54PM
(#22825917)
Again, you own your code dependencies[0]. A patch would be quickly released by software security experts, which every half-competent developer could apply to their product on their own. That's the benefit of ownership - you get to fix things. With software, you don't even need spare parts.
Depending on services is where the fragility starts. They're single points of failure, unless you have a plan to quickly switch to an equivalent competitor.
--
[0] - Unless they have a time-limited commercial license. Then they're essentially a service.