3 ms·
I don't even want to know how many mission critical systems automatically deploy open source software downloaded from github or (effectively random) public repo
by 2-3-7-43-1807 2y ago
I don't even want to know how many mission critical systems automatically deploy open source software downloaded from github or (effectively random) public repositories.
- rini17 2y agoUnlike Windows, there is at least the option to use curated software distributions such as Debian or RH that won't apply random stuff from upstream repositories.
- 2-3-7-43-1807 2y agoI'm talking about all sorts of software projects implemented using especially Python, Ruby, node.js etc.
- lmz 2y agoI like Debian but it's not like they need random upstream repositories when they can make random patches themselves e.g. the OpenSSL Purify issue.
- interludead 2y agoThese risks must be carefully managed that's it I think