I am not talking about runtime dependencies, which multi-binaries and busybox address. I am talking about the source code dependencies. When you have 100 times the number of entities (persons/projects) providing the source code golang pulls in for the easy-peasy build, vetting is 100 times more work.
I really admire the lightning fast compiles of golang and the language features - but the security nightmare of their standard repo is something that younger programmers don't seem to understand, and is shared by other new languages.
Custom Designed /
npub1thx…jfj3
2024-07-01 19:06:25
in reply to nevent1q…f6kj
Author Public Key
npub1thxca0y6klep9jg8k5gqw6dndwdw4l0caz0j88vhetwhnadp00wqtpjfj3Published at
2024-07-01 19:06:25Event JSON
{
"id": "f0770cf314f7f68b2d84a5a3ea61c038824aee8baa77dce0f5cb3c9c04dab797",
"pubkey": "5dcd8ebc9ab7f212c907b5100769b36b9aeafdf8e89f239d97cadd79f5a17bdc",
"created_at": 1719853585,
"kind": 1,
"tags": [
[
"p",
"dd664d5e4016433a8cd69f005ae1480804351789b59de5af06276de65633d319",
"wss://theforest.nostr1.com/",
"Laeserin"
],
[
"p",
"df67f9a7e41125745cbe7acfbdcd03691780c643df7bad70f5d2108f2d4fc200",
"wss://nostr.wine/",
"ManiMe"
],
[
"p",
"4c800257a588a82849d049817c2bdaad984b25a45ad9f6dad66e47d3b47e3b2f",
"wss://relay.damus.io/",
"mleku"
],
[
"e",
"61d4c0ac64c75d01285981b260b9282dd8dcad28fd8d310bdf65f828e14a9766",
"wss://relay.damus.io/",
"root"
],
[
"e",
"ca2f204f374ccabc4840e923eee8298f835891dca40cc1defbde164f2ce55642",
"",
"mention"
],
[
"e",
"890d7a8e4c5a32412553ecb7f773331a166c69ee6a0815563121b6ef00d5d34a",
"wss://relay.damus.io/",
"reply",
"4c800257a588a82849d049817c2bdaad984b25a45ad9f6dad66e47d3b47e3b2f"
]
],
"content": "I am not talking about runtime dependencies, which multi-binaries and busybox address. I am talking about the source code dependencies. When you have 100 times the number of entities (persons/projects) providing the source code golang pulls in for the easy-peasy build, vetting is 100 times more work.\n\nI really admire the lightning fast compiles of golang and the language features - but the security nightmare of their standard repo is something that younger programmers don't seem to understand, and is shared by other new languages.",
"sig": "26bffea43ac33ff246838e1d8e1f4bc353f51016c41a8f14b9ed563ec3e35cb8d2d91d56394caa4d349f7136266b9b51a62950f36f39b4139803a96bf5ceed47"
}