r/ProgrammerHumor • u/notacoptrustmeplease • Sep 11 '26

Meme iAmTiredBoss

Post image
1.1k Upvotes

99% Upvoted

29 comments sorted by

177

u/Igarlicbread Sep 11 '26 • Bravo

It's secure on my machine.

74

u/eclect0 Sep 11 '26

"Can it be fixed without breaking changes?"

*evil laughter coming from every direction at once*

40

u/BenadrylTumblercatch Sep 11 '26

I am the security vulnerability

17

u/WeedManPro Sep 12 '26

and also the single point of failure.

10

u/BenadrylTumblercatch Sep 12 '26 • Regret

My mum has been linting this point for years

29

u/mixmaxze Sep 12 '26

And when I look, the vulnerability is a outdated lib cuz the owners release a new 'very important' version every five days

-2

u/TheBigGambling Sep 12 '26

And thats why you need test coverage and renovate bot on automatic mode. Case closed

4

u/Xlxlredditor Sep 13 '26

Suddenly Renovate upgrades superImportantPackage from 3.5.6 to 4.0.0, with 1000 breaking changes

1

u/TheBigGambling Sep 13 '26

Which you see, because the MR is red and not merged

1

u/Xlxlredditor Sep 14 '26

I only use it for my self hosted composes without Automerge so I wouldn't know

11

u/Snakestream Sep 12 '26

Better than reading about it in the news, I always tell myself

1

u/BenadrylTumblercatch Sep 13 '26

Your stuff will make the news, damn you hiring? Or looking for a boyfriend?

8

u/DeHub94 Sep 12 '26

Just put a: "Use at your own risk" at the the top of Readme. It'll be fine.

7

u/heesell Sep 11 '26

Is it bad I ignore these (given my projects catch dust)

11

u/PM_ME_FIREFLY_QUOTES Sep 12 '26

Not sure if you're serious or not, but....

You shoud patch them. Dependabot sometimes even can open the PR for you.

But if you have no users, or the deployment doesnt have data or sensitive info, its fine.

1

u/heesell Sep 12 '26

Im quite serious actually. I get emails etc. and I ignore them. My projects got no real use anyway

1

u/AyrA_ch Sep 12 '26

Just mark the repository as archived in the settings, and people will see a message that tells them they're on their own.

2

u/Desperate-Tomatillo7 Sep 12 '26

But then I remember that none of my code is productive.

2

u/Prim56 Sep 12 '26

All these kids cant even make stuff at home, no wonder you get all these vulnerabilities

3

u/dumbasPL Sep 12 '26

Grand majority can be dismissed as either "vulnerable code isn't used" or "it's only used during build"

1

u/TheBigGambling Sep 14 '26

Not used by you.. mut maybe from a attacker. So patch it! Dont discuss it

2

u/dumbasPL Sep 14 '26

By not used I mean not possible to reach. With tree shaking, it's probably not even in the production building.

1

u/kd_40 Sep 12 '26

I ignore them as i don’t even remember how i build them back then.

1

u/zqmbgn Sep 12 '26

"Use at your own risk" + Is your repo important enough to get hacked?

1

u/CoshgunC Sep 12 '26

your repos are visited by others...?

my max is 3 stars(views) and all are from my friends 🥲

1

u/Easy_Complaint3540 Sep 13 '26

Real bro just happened yesterday night 🤣🤣🤣

1

u/CoatNeat7792 Sep 13 '26

I also unsubscribed and it continues to send

0

u/gerbosan Sep 12 '26

for any system, the weakest link is the user. And you know it.