Re:Static Linking Considered Harmful (2004)
by ed25519FUUU on Monday September 28, 2020 @12:14PM
(#24618234)
> fixes (either security or only bug) have to be applied to only one place: the new DSO(s).
Yes, and all of your bugs can be introduced in a new single place as well!
Seriously though. People love static linking because it solves more problems than it introduces, despite its downsides.
I will argue that it’s easier to keep a system secure with static linking. You can upgrade the service that is insecure immediately. Or else you need to wait for a Big Bang deployment, and it can be held up by some random thing that isn’t even in the critical path.
Yes, and all of your bugs can be introduced in a new single place as well!
Seriously though. People love static linking because it solves more problems than it introduces, despite its downsides.
I will argue that it’s easier to keep a system secure with static linking. You can upgrade the service that is insecure immediately. Or else you need to wait for a Big Bang deployment, and it can be held up by some random thing that isn’t even in the critical path.