Comment by Sohcahtoa82

2 days ago

Static linking makes distribution easier, but it's an absolute security nightmare.

With dynamic linking, you just upgrade the library on your system and you're done. With static linking, every binary that uses the library has to be rebuilt.

So then rebuild everything? I don't see the problem. NixOS shows how it's done.