Comment by dist-epoch

2 hours ago

> Because of the architecture of Artifactory. It's design is premised on the idea it is bug free. What incredible hubris.

So we should stop using SSH? Because it's based on the same premise - that it is bug free.

1 comment

dist-epoch

Reply
angry_octet  24 minutes ago

I can think of better straw men. But if they had approached their task with half the seriousness of the openssh maintainers then they probably wouldn't be failing to check the return value of authentication functions.

OpenSSH authors have spent considerable effort separating concerns, reducing privileges, process isolation, etc. So I would say they have been planning for potential bugs. These techniques are very much absent from Artifactory.

https://vivianvoss.net/blog/technical-beauty-openssh