you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 6 months ago (3 children)

The good news is that there already is a gold standard for supply chain security: the Go programming language.

Lmfao

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 6 months ago (2 children)

    Competent standard lib + decentralized libs + checksum db.

    While the article is a bit theatralic, it offers important arguments.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 6 months ago (1 child)

    There are some good points in it, though I wouldn't really consider go dependencies all that decentralized in practice and I don't understand how checksum db will protect against supply chain attacks with stolen credentials, but I admit I haven't looked into the details.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 6 months ago

    Yep you're right, tampering before transmission is still possible. I think I agree with having a strong standard lib helping that considerably. While the language of the blog is not objective, the "content" was better than expected 😊

  • source
  • parent