5 ms·
> Big business absolutely do that. If would be true somebody would have noticed this hack before. Has been online for 2 months and they only found out because
by ttty2 8y ago
> Big business absolutely do that.
If would be true somebody would have noticed this hack before. Has been online for 2 months and they only found out because of a deprecation message.
> Of course, for the most part big business doesn't take 3rd party dependencies.
I worked for many big companies, definitively they use 3rd party deps.
> std library in-house
And that contains 3rd party deps.
Big companies have some 3rd party to check the libraries but it looks like they are not good enough because they didn't catch this one.
- swiftcoder 8y agoMaybe this particular dependency just isn't used by many big firms? I've had to go through code, security, and legal reviews at both Amazon and Facebook when desiring to import 3rd party libraries. They were fairly thorough.