News for hackers. Stuff that matters.

A comment on Make Ubuntu packages 90% faster by rebuilding them. Parent comment

Re:Make Ubuntu packages 90% faster by rebuilding them by taeric on Wednesday March 19, 2025 @12:28AM (#43408268)
I'm curious how applicable these are, in general? Feels like pointing out that using interior doors in your house misses out on the security afforded from a vault door. Not wrong, but there is also a reason every door in a bank is not a vault door.

That is, I don't want to devalue the CVE system; but it is also undeniable that there are major differences in impact between findings?

[ Parent | on HN ]
Re:Make Ubuntu packages 90% faster by rebuilding them by skrebbel on Wednesday March 19, 2025 @03:51AM (#43409229)
> I don't want to devalue the CVE system

You could, though. It's 99.9% stuff like this!

[ Parent | on HN ]
Re:Make Ubuntu packages 90% faster by rebuilding them by lpapez on Wednesday March 19, 2025 @05:58AM (#43409991)
In my experience, most CVEs are reports about ice cream trucks lacking nuclear-proof bank vault doors.
[ Parent | on HN ]
Re:Make Ubuntu packages 90% faster by rebuilding them by rlpb on Wednesday March 19, 2025 @04:13PM (#43416756)
Sure, but jq is very much a "front door" in your analogy. You'd have to look at each individual CVE to assess the risk for your specific case, but for jq, claimed security vulnerabilities are worth paying attention to.
[ Parent | on HN ]