Post #4263447

@joshbressers@infosec.exchange good post. I like the metaphor. I have thought like that for a long time. Here is my personal take. Accept it as an immutable fact. You cannot beat it. The complexity and recursive aspect of it is what fundamentally make it works. The more we accept the constraints, the more we can find a solution. Because once you eliminated the impossible, what is left is the only thing that make sense. And that, to me, means that we are going to start realising that our boundary is _every single machine used by a FOSS maintainer_. You cannot secure just your own engineers machines. You cannot secure your perimeter. That ships sailed away somewhere in the 00s. So now, what we need, is that we need to make every machine that could end up being used by a FOSS Maintainer far more secure.... Time to invest in some thinking for the CLI and all these packages you mentioned.