Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Shared libraries are critical for security updates.


Not if you are using a package manager.


If you security update all the packages all the time if some compiled dependency needs updating, then you have all the disadvantages of shared libraries the parent complained about but with much more effort and cost.

Or in other words, the perceive simplicity of static linking comes form pretending that something is now a stable dependency you can freeze that does not need to update or which you can update at your own schedule. This is not true because of security issues.

The advantage that you can run the same binary independent from the shared library context even in ten years is only true if you do not care that security issues in the binary remain unfixed for 10 years.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: