Hacker News new | ask | show | jobs
by arendtio 2629 days ago
Hehe, kinda funny when an application comes with more security vulnerabilities than it has lines of code for its own logic ;-)

EDIT: edited to make it less ambiguous

2 comments

My app does very little and is meant to be self-hosted for your own use. Or are you talking about Elixir or Nim as a language?

Edit: Oh I get it you actually meant:

"Hehe, kinda funny when your application written for Electron comes with more security vulnerabilities than it has lines of code for its own logic ;-)"

Sorry, is this a comment on elixer or Nim?
Neither.

It is about having a color picker (probably just a few lines of code) bundled with quite a set of dependencies and complex chromium runtime environment which does not get updated regularly. Therefore they keep their vulnerabilities even after they are known and fixed in later versions of the dependencies.

With small footprint applications, you are less likely to have such problems.

Can't argue with you there, I tend to use tcl/tk for something this small.