jsm on Nostr: One note, although I’m not the biggest fan of the current JavaScript ecosystem, it ...
One note, although I’m not the biggest fan of the current JavaScript ecosystem, it doesn’t seem right to say it’s wrong to do anything secure in the language. Backdoors can be put anywhere, even in “secure” systems languages without auto upgrades and vendored deps as the recent XZ Utils fiasco shows.
Published at
2024-12-27 16:52:33Event JSON
{
"id": "5f788425e0332eaa62c48001e94bf8177a4a52e1bea5ffcaffcb58e29242e33d",
"pubkey": "e0339348ca6cac9708cd98e631e2f4baad534dfce870881b65aa57d30ff7253e",
"created_at": 1735318353,
"kind": 1,
"tags": [
[
"e",
"e56a0c78b4ddc714779e7f4e9b040b4aa0cb9eea60cca743d6ce6917e6fb0a94",
"",
"root"
],
[
"p",
"0371db7fd4437ce63e60dedc313cad6ee8b17fc691fe05231f9a140134fc0d08"
]
],
"content": "One note, although I’m not the biggest fan of the current JavaScript ecosystem, it doesn’t seem right to say it’s wrong to do anything secure in the language. Backdoors can be put anywhere, even in “secure” systems languages without auto upgrades and vendored deps as the recent XZ Utils fiasco shows.",
"sig": "081348c5772ac7df394032cf60fe0922875466c9340c9da5094b9ee20f8937fd9cc594e29674339b7bb981f0dec2e152ad0b028fcea59b40e5b11aeddb238213"
}