It’s incredibly frightening how much all modern software expects you to download an entire toolchain to run it.
If it want anything resembling a secure toolchain you end up stuck with ancient software or C projects only.
Java? Here’s a grade *binary* included in the git “source” repo. Rust? Please go download rust via rustup, if you don’t have the version from this week gfy. Go? Basically the same, with tons of dependencies fetched from random git repos. JavaScript? lol, you’re screwed.
matt / Matt Corallo
npub185…swrdp
2023-04-30 23:10:34
Author Public Key
npub185h9z5yxn8uc7retm0n6gkm88358lejzparxms5kmy9epr236k2qcswrdpPublished at
2023-04-30 23:10:34Event JSON
{
"id": "25dbb0d15e5f24bb3f62d7bd3398ba6c8feb3ea22c8120d2824e487b99caeda4",
"pubkey": "3d2e51508699f98f0f2bdbe7a45b673c687fe6420f466dc296d90b908d51d594",
"created_at": 1682896234,
"kind": 1,
"tags": [],
"content": "It’s incredibly frightening how much all modern software expects you to download an entire toolchain to run it. \n\nIf it want anything resembling a secure toolchain you end up stuck with ancient software or C projects only.\n\nJava? Here’s a grade *binary* included in the git “source” repo. Rust? Please go download rust via rustup, if you don’t have the version from this week gfy. Go? Basically the same, with tons of dependencies fetched from random git repos. JavaScript? lol, you’re screwed. ",
"sig": "920a8d5d467f83b27c39aef68d812dc566f986b8bc8ed51be5ee6f195624cbf8f4918b2c75c6b66606808b4ce025ee6d282d6c8e5a475488c07181d5c4c7f709"
}