Source: Hacker News
Article note: I always find the tension between "Reproducible builds and immutable systems are good for security" and "Heterogeneity is good for security" interesting.
Both make whole classes of attack _dramatically_ harder, but the methods are often mutually exclusive.
Comments 