2 ms·
> "They won't screw up" is the wrong way to look at security: humans always screw up. We're essentially fallible. Sure. So pick a system that includes at least
by PaulDavisThe1st 2y ago
> "They won't screw up" is the wrong way to look at security: humans always screw up. We're essentially fallible.
Sure. So pick a system that includes at least one extra possible barrier to them screwing up than the system that has none.
- woodruffw 2y agoIt’s not “either or.” It’s been decades since a “package the world” approach has been practical at human scales. (I think it’s great that distributions provide one extra set of eyes. But we’re deluding ourselves if we think that can scale to the actual realized demand for both new software and continuous change to software. It’s also not very fair to the distributions.)