4 ms·

These ideas are mostly for people that want to run prepackaged, closed, commercial software. Community maintained software with short dependency lists doesn’t h

by swiley 7y ago

These ideas are mostly for people that want to run prepackaged, closed, commercial software. Community maintained software with short dependency lists doesn’t have this problem. I run Linux on my desktop for a number of reasons and one of them is not dealing with stuff like this. If I really don’t like something I dump it in a container (I know it can get out but at some point you either trust the software or decide it’s unusably malicious, I mostly only do this when I have to run node.js crap anyway.)

minitech 7y ago
> Community maintained software with short dependency lists doesn’t have this problem. That’s just not true. One of the first things mentioned in the post is vulnerabilities. An image viewer shouldn’t be able to put your SSH keys at risk no matter how many memory safety issues it has. Plus there’s all sorts of software that doesn’t have short dependency lists that I’m sure you’d still like to use. A web browser, for example?