3 ms·
>How many different versions of OpenSSL are running on my laptop right now? Who can say? but that's a problem, too. i'd rather all things on a system be bottl
by serf 4y ago
>How many different versions of OpenSSL are running on my laptop right now? Who can say?
but that's a problem, too.
i'd rather all things on a system be bottleneck-forced into using the latest version of security libraries that my system is actively updating; yes, this causes issues, but not issues like "There was a huge vulnerability found in X version Y, does it affect me?".
in other words, i'd rather have system breakage than insecurity. That's a personal taste, I admit.
that said, the sandboxing aspect behind 'the new ways' is fantastic.
- bandrami 4y agoI do love the sandboxing, granted. But "let's just hope the app maintainers keep up with our rolling platform deprecations" is a horrible idea.
- AnIdiotOnTheNet 4y agoWhy don't you just turny our computer off then? It can't be exploited if it isn't actually running. Which is to say most people use a computer to run software, so if the software doesn't run the security is pointless anyway. Sure, if only some software breaks and you can wait for fixes that's a tradeoff, but given that in package maintainer land those fixes could be months or years away...
- deleted 4y ago[deleted]