Remix.run Logo
singpolyma3 4 hours ago

Note that minisign was also vulnerable in the gpg.fail exposures

maqp an hour ago | parent | next [-]

All software has bugs. But having a small purpose-built program do one thing well is much smaller attack surface. The Unix philosophy also makes a pretty good security argument.

woodruffw 4 hours ago | parent | prev [-]

Yes, but not nearly to the same extent. The GPG vulns are staggering in comparison.