3 ms·
Are you saying that you believe that deploying linux is being lax with security? That deploying: * nginx * node * apache * java * ruby * python * bash
by olliej 5y ago
Are you saying that you believe that deploying linux is being lax with security?
That deploying:
* nginx
* node
* apache
* java
* ruby
* python
* bash
* linux
* chrome
etc
is lax with security?
The amount of "audited" code is vanishingly small, and as many "audited" crypto contracts have demonstrated those audits don't ensure code is bug free, and those are trivial pieces of code.
- throw10920 5y ago"Lax" depends on what your code is doing. If it's protecting nuclear secrets or the personal information of hundreds of millions of people (as in the case of Apple), then yes, deploying Linux is absolutely being lax with security. The kernel itself has had thousands of security vulnerabilities, with userspace on top adding tens of thousands more. If you're writing software for your smartwatch, then maybe Linux (or node/apache, which are built to lesser quality standards) is OK.