4 ms·

I can't say i've looked at hadoop but this fear of jars seems.. Overkill? You can decompile jars. Look at any Java project which leverages 3rd party libraries..

by spydum 12y ago

I can't say i've looked at hadoop but this fear of jars seems.. Overkill? You can decompile jars. Look at any Java project which leverages 3rd party libraries.. It's not uncommon to have dozens of libraries sourced from the community. They could all have malicious code buried in them. Not sure I understand why the hadoop hate?

kazagistar 12y ago
Many libraries can at least be recompiled from scratch. From what I hear, hadoop is much worse off.
im3w1l 12y ago
To me it seems his complaint is not that hadoop pulls in binaries. The complaint is that it pulls in parts with unknown origin. He wants to be able to trace the components backwards, and know the names of the people responsible for building them, ideally reputable people.