3 ms·
The standard never has been and never will be absolute security. That’s an impossible threshold nothing would ever meet even though it’s objectively true that s
by vlovich123 2y ago
The standard never has been and never will be absolute security. That’s an impossible threshold nothing would ever meet even though it’s objectively true that software today is generally more secure than software 30 years ago. The strongman claim being made is “Nix is harder and more expensive to exploit than traditional build systems”. So sure, if you find a cheap way to exploit Nix, track me down. But until then, it remains at least plausible & in practice very likely that Nix is harder to exploit than alternate systems on a technical level.
- xvector 2y ago> But until then, it remains at least plausible & in practice very likely that Nix is harder to exploit than alternate systems on a technical level. Do people even read package derivations? Feels like it'd be easy to check in a derivation with an exploit.
- sirspamalot112 2y ago[dead]
- sirspamalot111 2y ago[flagged]