Hacker News Reader

This is only insane in the engineering world because actual human lives are depending on the structural integrity of your cathedral.

Even if you face a supply chain attack, the only value lost may be money for most businesses, and not enough that worrying about supply chain attacks is worth it.

View on HN

Actual human lives depend on software development. Hospitals, Airports, Airplanes, missiles, satellites. If any of these are attacked via supply chain lives will be lost and countries could even collapse if the attack was severe enough.

Almost neither of which use a lot of dependencies.

It's still C and C++ world out there, and everything gets shrink wrapped. It's more likely that you would find a logic bug or a well known security issue in a single library than somehow infest the supply chain of these particular applications.

Every piece of off the shelf software is labelled and audited in that world.

Reply on news.ycombinator.com