Minimum Release Age is an Underrated Supply Chain Defense : security@programming.dev

Minimum Release Age is an Underrated Supply Chain Defense (daniakash.com)

submitted 7 months ago by codeinabox@programming.dev to c/security@programming.dev

6 comments fedilink hide all child comments

all 6 comments

sorted by: hot top controversial new old

[–] TomasEkeli@programming.dev 2 points 7 months ago

There is some truth to this - staying on the bleeding edge exposes you to things earlier.

Not really surprising, but maybe a consequence people who want to be on the latest version immediately did not consider. Good article!

[–] AntiBullyRanger@ani.social -2 points 7 months ago (4 children)

incompatible with capitalism

hideshow 4 child comments

[–] duckythescientist@sh.itjust.works 4 points 7 months ago (3 children)

Did you comment this on the wrong post?

parent

hideshow 3 child comments

[–] AntiBullyRanger@ani.social -1 points 7 months ago (2 children)

parent

hideshow 2 child comments

[–] duckythescientist@sh.itjust.works 2 points 7 months ago (1 child)

Do you expect there to be no crime and no money if capitalism is replaced? And effort toward mitigating supply chain hacks is definitely compatible with capitalism especially with such an easy mitigation as proposed in this article.

parent

hideshow 1 child comment

[–] AntiBullyRanger@ani.social 0 points 7 months ago

But then your unsecure, cheap, and fast competitor will upload the features and solutions of your scope 14 days ahead of you, over and over again, until you're suddenly years behind the rest. Are this unaware of the modern business deployment model?

parent