Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Rustaceans at the border. Parent comment
Nice stramwan there - when the alternative is trusting random strangers on github.
> How many packagers actively audit the code they support for a given distro?
Many, plus large companies do plenty of vetting and indemnification on popular distros.
There are very large contracts involved in this. Do you think the typical bank installs random stuff from the Internet on their payment processors?
> Packagers have even introduced[1] vulnerabilities by "fixing" code they didn't fully understand at the time.
Another strawman. How many vulnerabilties have been prevented or fixed by packagers? Quite a good number.
> we're doing them no favors by being confused at what their job is.
Speak for yourself.
There are no comments on this comment yet.
Nice stramwan there - when the alternative is trusting random strangers on github.
> How many packagers actively audit the code they support for a given distro?
Many, plus large companies do plenty of vetting and indemnification on popular distros.
There are very large contracts involved in this. Do you think the typical bank installs random stuff from the Internet on their payment processors?
> Packagers have even introduced[1] vulnerabilities by "fixing" code they didn't fully understand at the time.
Another strawman. How many vulnerabilties have been prevented or fixed by packagers? Quite a good number.
> we're doing them no favors by being confused at what their job is.
Speak for yourself.