3 ms·
Agree. It's going to take a lot of people getting pwned to change these attitudes though
by marcus_holmes 1y ago
Agree.
It's going to take a lot of people getting pwned to change these attitudes though
- zbentley 1y agoWhy would attitudes change? The impact is diffused across a wide enough populace (precisely because ecosystems with weak community norms around dependency security are extremely popular) that the rate of “shaping up in response to a painful lesson” may remain lower than the rate of newcomers joining the community or the rate of new insecure dependencies proliferating to serve new needs brought about by new use cases brought about by growing popularity of a platform. That’s not to say it’s hopeless. Rather, it’s more likely that widespread improvement will need to be centrally orchestrated rather than organic in response to hacks.
- a96 1y agoPHP is living proof that no matter how Broken As Designed something is, it will just go on if it's popular enough.