News for hackers. Stuff that matters.

A comment on Rewriting Sysctl(8) in Rust: Systeroid. Parent comment

Re:Rewriting Sysctl(8) in Rust: Systeroid by hu3 on Tuesday April 19, 2022 @10:06AM (#31083296)
> It's certainly good to think about how to reduce supply chain risk - and that may begin with thinking about dependencies, but it certainly shouldn't end there.

I don't think anyone here said it does.

[ Parent | on HN ]
Re:Rewriting Sysctl(8) in Rust: Systeroid by samhw on Tuesday April 19, 2022 @10:08AM (#31083324)
I was responding to "striving to reduce the number of dependencies is a good goal". I don't think that's categorically true. I think it's an XY problem where one would do better to focus on the 'X' (i.e. reducing risk of malicious third-party code).
[ Parent | on HN ]