3 ms·
(a) I'm all for more widespread attempts at capability security* (b) failing that, an alternate approach to the problem of deep and wide supply chains is verti
by 082349872349872 3y ago
(a) I'm all for more widespread attempts at capability security*
(b) failing that, an alternate approach to the problem of deep and wide supply chains is vertical integration: just spitballing here, but we're programmers (and these days, it's even claimed we have AI support); is it too much to ask that most of us ought to be able to code up wheels that roll?
* free market mechanisms, at least as currently implemented, seem to me much better at figuring out how to compensate people after something bad has happened than at preventing it from happening in the first place.
- apantel 3y agoThe vertical integration thing isn’t feasible for anyone besides a giant company that can afford to write its own OS with no outside input. Let’s say I code all my own dependencies in my particular domain (Java). I still have to run my code in an environment: there’s the JVM, then Linux beneath that, the hypervisor at my cloud provider beneath that, etc. You want me to code all of that myself too? You know, frankly I would love to understand and control the stack all the way down. But that’s a life goal. It’s not something most people can or would be interested in doing. We’re all stuck blindly trusting a vast, incomprehensible software supply chain.