undefined | Better HN

0 pointstfvghbv8y ago0 comments

> the trust path for a huge chunk of binary data now hinges on a single individual, rather than a corporate entity.

You make it sound like it was a bad thing. It's not.

0 comments

3 comments · 3 top-level

It is definitely a bad thing from a risk standpoint, no two ways about it. Simply because that person could get hit by a bus, burn out, etc.

k_sh8y ago

I'd trust Canonical for Ubuntu images over a random internet citizen that decided to provide them.

When it comes to base images, I'd much rather trust Canonical, Docker Inc, Redhat, etc than Some Dude.

j / k navigate · click thread line to collapse