Re:Are libraries always the best choice in secure development?
by mytailorisrich on Thursday February 13, 2025 @02:48AM
(#43033693)
The key when using libraries is to use trusted, local, versions.
Very often versions are not locked and the build system is such that libraries are downloaded from remote third parties on demand. IMHO this is what creates, or at least greatly amplifies, the risk of exploit.
Very often versions are not locked and the build system is such that libraries are downloaded from remote third parties on demand. IMHO this is what creates, or at least greatly amplifies, the risk of exploit.