4 ms·
> What happens when there are vulns for your stack? That’s a good point and the answer is: You have to monitor your dependencies of public services (that aren’
by hynek 15y ago
> What happens when there are vulns for your stack?
That’s a good point and the answer is: You have to monitor your dependencies of public services (that aren’t that many).
But you have to do that anyway, because I can’t explain to our customers that their data has been hacked because Ubuntu/Red Hat didn’t update Django (fast enough).
- serverascode 15y agoYou make it sound like if you do one then you can do 100. Not the case.
- hynek 15y agoMy public services don’t have 100 dependencies and that’s on purpose. Relying on magic distribution fairies for all your libraries is a IMHO a false sense of security, YMMV. How do you make sure that whenever one of your dependencies gets updated that your daemons get restarted? And what do you do if you need a package that isn’t part of your distribution?
- serverascode 14y agoDo you have your own linux distro?