3 ms·
In decades of experiencing various computing environments, the amount of time wasted to fix applications broken by updates to dynamically-linked libraries has d
by adrian_b 2y ago
In decades of experiencing various computing environments, the amount of time wasted to fix applications broken by updates to dynamically-linked libraries has dwarfed by a few orders of magnitude the amount of time saved by not recompiling statically-linked applications because of a new library version that fixes security problems.
- rbanffy 2y agoWhat scares me about the need to recompile statically linked binaries is that the problem is invisible until a bug hits. You don't know the statically linked library is vulnerable unless you keep track of all versions that went into that binary and almost no organization does that. DLL problems are very easy to see and very obvious when they happen. But it's been a long while since I last saw one.