3 ms·
The article makes more sense if you consider that Google is notorious for statically linking (almost) all its production binaries, something that the Go toolcha
by puzzle 8y ago
The article makes more sense if you consider that Google is notorious for statically linking (almost) all its production binaries, something that the Go toolchain supported early on for related reasons.
- CaliforniaKarl 8y agoI’m guessing it’s also related to the recent SQLite zero-day. SQLite is public-domain, and so it’s not unusual for projects to simply include the code directly in their source distributions, which will either build it in or will provide a `./configure` option to use an already-built form (this is used by distro packagers). When the “build it in” option is used, then it’s statically linked.
- tptacek 8y agoI think Thomas Dullien has been working on this stuff for a very long time; his company, Zynamics, which Google acquired ages ago, was the author of BinDiff.
- devereaux 8y agoThere I many things I disagree about with Google, but statically linking binaries is a good practice if you know what you are doing and have a central repository where you handle your own versions of everything. You can not always rely on linux distribution to not mess up with a lib, especially if it "obscure" with few users.