News for hackers. Stuff that matters.

A comment on Squarespace Enters Definitive Agreement to Acquire Google Domains Assets. Parent comment

Re:Squarespace Enters Definitive Agreement to Acquire Google... by bbarnett on Friday June 16, 2023 @08:09PM (#36365689)
It's not just old code, it's an old compiler too. One with security issues well known, unpatched.

If you think security is an afterthought, you're doing it wrong.

[ Parent | on HN ]
Re:Squarespace Enters Definitive Agreement to Acquire Google... by katbyte on Friday June 16, 2023 @09:08PM (#36366114)
again: not everything sits on the public internet, and by the time someone gets access to the application there are far more serious concerns then python 2 vs 3

this also really highlights the problem with python's 2 vs 3 split: there is a large body of work that will never be updated and will forever run 2 including actual web/publicly facing code. And saying "just upgrade because security" isn't going get much of that code upgraded.

[ Parent | on HN ]
Re:Squarespace Enters Definitive Agreement to Acquire Google... by bbarnett on Sunday June 18, 2023 @11:54PM (#36387152)
and by the time someone gets acces

This sort of thinking, is why places get hacked. You don't know what the access vector is. Stop making excuses. Secure your shit.

I would be so happy if a law was passed, and such actions were criminal.

[ Parent | on HN ]