4 ms·
> is that really this insecure Depends on how many libraries there are. I have to deal with at least 2-3 different CVEs existing in our libraries or runtimes a
by falcolas 6y ago
> is that really this insecure
Depends on how many libraries there are. I have to deal with at least 2-3 different CVEs existing in our libraries or runtimes a month. And I’m dealing with a pretty small surface area compared to some of my peers.
We rebuild our environment from scratch every week to reduce the manual work involved in resolving those CVEs.
- blunte 6y agoSurely some of those security vulnerabilities in underlying libraries could be avoided with a bit more careful, slower releases of the libraries themselves. There is no question that the current app reality is one or more orders of magnitude more complex than in "the old days"; but even so, I think the race to MVP (and perhaps the VC pressures that drive some of that?) have led to layers of rushed out, risky codebases.