Hacker News new | ask | show | jobs
by fnimick 294 days ago
While true, we really should be treating every single piece of external code as though it's malicious.
1 comments

No, we shouldn't. We live in a society, and that level of distrust is not just unrealistic, it's disastrous. This doesn't mean you should share your house keys with every drive by PR contributor, but neither should you treat every PR as if it's coming from Jia Tan.