4 ms·
I mean I agree with your first two sentences but > recompile it from source to pull in the latest openssl patches... Why would they do this rather than rely o
by nineteen999 5y ago
I mean I agree with your first two sentences but
> recompile it from source to pull in the latest openssl patches...
Why would they do this rather than rely on their upstream distributor to push an updated OpenSSL shared lib, and just apt-get/dnf install it?
... things have gone extremely backwards in this misguided modern rush to statically link everything so we can install it into a container.
- phendrenad2 5y agoPeople assume that if you just switch to Linux, you'll get world-class security no matter what you do. But, real-world use diminishes that significantly (non-technical users, IT teams who aren't command-line gurus, vendors who ship outdated patches, budgeting departments that won't approve expenses to move off out discontinued software, etc. Not to mention, Linux as a platform is battle-tested for server purposes only. Local exploits abound. "Just use Linux" is easy to say, but I wonder, would it really improve things?