I wholeheartedly agree with this blog post. I believe someone on here yesterday was asking about config file locations and setting them manually. This is in the same vein. I can't tell you how many times a command line method for discovering the location of a config file would have saved me 30 minutes of googling.

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 3 years ago (4 children)
  • [–] 1 point 3 years ago (3 children)

    Isn't this what updates are for? maybe I'm misunderstanding what you mean by static libraries.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 3 years ago (2 children)

    @TheBaldness
    When you bundle everything for an app inside a self-contained directory, it's no different than static linking a binary.

    An exploit in a library the package links against means that application is still vulnerable even if the same library on the operating system has been updated to fix the security flaw.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 3 years ago (1 child)

    Apple managed to do it for a long time. I imagine they update the app more frequently than they would otherwise.

  • source
  • parent
  • hideshow 1 child comment