> I'll take an "insecure" ldd over having to recompile every single binary when there is a glibc/libjpeg/libpng/libwhatever security fix, any day. With the "in

> I'll take an "insecure" ldd over having to recompile every single binary when there is a glibc/libjpeg/libpng/libwhatever security fix, any day. With the "independent packaging" push using containers and dependency bundling, you get both downsides for the cost of one. https://blogs.gnome.org/alexl/2015/02/17/first-fully-sandboxed-linux-desktop-app/ https://blogs.gnome.org/alexl/2015/02/17/first-fully-sandbox...