3 ms·
> seems like there's no solution There is - don't depend on anybody else's software. It just means that software development will take longer and cost more.
by commandlinefan 4y ago
> seems like there's no solution
There is - don't depend on anybody else's software. It just means that software development will take longer and cost more.
- Beltalowda 4y agoThis assumes that your own software is more secure.
- waynesonfire 4y agofor what it's worth, the log4j vulnerability was due to some obscure feature that nobody uses. unlikely you'd even write such code.
- upupandup 4y agobut the cost of rewriting everything that you are currently using through dozens of dependencies and third party libs you are going to go broke. Unless you have the budget like the DOD which has its own coding language I believe, you are ngmi Not to mention you would be introducing attack surfaces that wont have enough attention because its only being used by your team. At least with a widely used lib, vulnerabilities are caught, published (very important) and constantly raising vigilence. here you would have to perform your own threat mitigation and have bounty programs.