Re:Squarespace Enters Definitive Agreement to Acquire Google...
by katbyte on Friday June 16, 2023 @07:01PM
(#36365156)
at the point that would matter you have more pressing things to worry about then old code.
[ Parent
| on HN ]
Re:Squarespace Enters Definitive Agreement to Acquire Google...
by bbarnett on Friday June 16, 2023 @08:09PM
(#36365689)
It's not just old code, it's an old compiler too. One with security issues well known, unpatched.
If you think security is an afterthought, you're doing it wrong.
Re:Squarespace Enters Definitive Agreement to Acquire Google...
by katbyte on Friday June 16, 2023 @09:08PM
(#36366114)
again: not everything sits on the public internet, and by the time someone gets access to the application there are far more serious concerns then python 2 vs 3
this also really highlights the problem with python's 2 vs 3 split: there is a large body of work that will never be updated and will forever run 2 including actual web/publicly facing code. And saying "just upgrade because security" isn't going get much of that code upgraded.
Re:Squarespace Enters Definitive Agreement to Acquire Google...
by bbarnett on Sunday June 18, 2023 @11:54PM
(#36387152)
and by the time someone gets acces
This sort of thinking, is why places get hacked. You don't know what the access vector is. Stop making excuses. Secure your shit.
I would be so happy if a law was passed, and such actions were criminal.