On Sat, 1 Jun 2024 23:03:37 -0400
Steve Litt wrote:
> Systemd has about 80 times more lines of code than runit. I know this
> doesn't 1 to 1 correspond to attack surface, but it's a reasonable
> approximation.
Numbers of lines of code does not correlate with attack surface.
Neither does code com
On 6/2/24 07:42, Rich Pieri wrote:
Numbers of lines of code does not correlate with attack surface.
Neither does code complexity.
Silliness.
Lines of code isn't identical to the size of the attack surface, but it
has to be strongly correlated, the same way that not wearing a seat belt
isn't
On Sun, 2 Jun 2024 12:57:49 -0700
Kent Borg wrote:
> but I have personally seen that more lines of code means less is
> known about what is really going on inside that code, which means
> lower odds that the right (and safe) stuff is going on in there.
Anecdote is not evidence. Just because you'
