6 ms·
> Anything that was copied from UNIX is normal and ordinary and just part of the way the world works. > Anything that is included in a standard Ubuntu distribu
by jonahx 4y ago
> Anything that was copied from UNIX is normal and ordinary and just part of the way the world works.
> Anything that is included in a standard Ubuntu distribution is exciting and revolutionary.
> Anything else is a ‘dependency’.
The picture you're painting of pure back-in-my-day-sonny! bias, while not totally wrong, is also not quite accurate. These different technologies have different installed bases, different probabilities of security vulns, different probabilities of still being maintained in 10 years, etc.
- jameshart 4y agoYes! The probability of a security vulnerability in the Apache install whose httpd.conf you had to write, running on a VPS you have to patch yourself, versus the probability of a security vulnerability in S3/CloudFront are indeed vastly different. These are the kinds of trade offs we make.
- FpUser 4y ago1) I do not use Apache. 2) As for probability - I had zero security incidents on my personal website / blog in 15 years. And I did not spend my life patching things. Just few minutes every once in a while. Keep this FUD for uninformed.
- dgb23 4y agoEven if you did use Apache it’s FUD. It’s a very robust, well understood and documented technology.
- jen20 4y agoIf there is a security vulnerability in S3 or CloudFront, it will be patched pretty damn quickly. If there is a security vulnerability in a static site generator, that is unlikely to present to the internet, as the generator is not running on a public-facing server. Hugo is now 8 years old, Jekyll is now 13 years old. Both are actively maintained, and given the inability of most people to string together a shell script that is both portable and correct, are likely better solutions than said shell script.