• 1 Post
  • 23 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle




  • All of Windows is malware. By default you have adverts in your start menu, you have pop ups (which is not the same thing as Windows Update, pop ups are a service provided by Explorer) which maliciously install unwanted web browsers.

    You can’t support Trump and then claim that only a small part of his following is due to racist bigots.

    You can’t support AI and claim that only a small part of it damages the atmosphere.

    You can’t support Windows and claim that only part of it is malware.

    Windows 100% enables and supports this nefarious behaviour. It’s the abusive spouse trapping you before beating the shit out of you for your own good.












  • Gradle, with it’s transitive dependency modifications is a huge pain in this area.

    It used to be that if a library ended up having a flaw then it would be flagged and we would get the dependency updated. These days security block the “security risk” and you have to replace your dependencies dependency. Fingers crossed you can get it to actually test all the code paths.

    If an second level project gets a flaw, and it’s used indirectly then we should really look at getting the import updated so that we know it works. If that import is abandoned then we should not be updating that second level dependency, either adopt and fix the first level dependency or look at an alternative.