Hacker News new | ask | show | jobs
by asdfasgasdgasdg 2 hours ago
I think it is extremely rare to vet every single line of one's dependencies. Especially lines that are intentionally hidden from the terminal using escape sequences. Do you review the diffs of all projects you depend on to check for the injection of malware? If so, my hat is off to you and also how do you get anything else done?
1 comments

Then why are you letting a machine you don't understand perform side effects that you don't vet, based on it's insane interpretation of untrusted data?
Sorry, I just don’t think this is a tenable or realistic way to approach dependencies in this day and age. If it works for you then I’m happy for you tho.
> Then why are you letting a machine you don't understand perform side effects that you don't vet, based on it's insane interpretation of untrusted data?

I mean, you posted this using a browser, right?