News for hackers. Stuff that matters.

A comment on The world needs a software bill of materials. Parent comment

Re:The world needs a software bill of materials by AlphaSite on Monday March 22, 2021 @02:37AM (#26537499)
Oh I think you Mia understand, the is generates one bom, your build tooling generates a second at runtime your web server unions the two and that’s the actual machine BOM.
[ Parent | on HN ]
Re:The world needs a software bill of materials by indymike on Monday March 22, 2021 @08:48AM (#26540062)
Oh, I don't think I do. I do not want to have to write code that duplicates functionality of a build system in an http server which discloses what components are behind that server, exclusively so hackers can identify that some dependency of some library in some other software on the server is insecure in real time. No thank you.
[ Parent | on HN ]