Stop Security Nightmares - Pin Dependencies & Auto Update Now! #shorts #podcast #cybersecurity

One tip, pin your dependencies and set up auto-updaters. It's controversial, but I think like that, I do think that's a better practice than not doing it. A lot of people don't pin. Now you've got auto-updates and you're out of control. And if you pin and never set up updates, then you're stuck the other way too from known vulnerabilities. So I mean, the first one is obviously audit secrets and minimize those, but you said I can't pick that. The next one is pin everything and set up auto-updates, but don't do it every day if you don't want to. Just make sure you're updating enough to know you can when you need to. Yeah.

Update enough to know that you can when you need to. I really like that advice. That's subtle and great advice, and it really speaks to updating being a practice, not a thing you do.

Yeah. It's like disaster recovery. Everyone knows that. If you can't actually roll back, then you don't have any disaster recovery. Yes, like backups. Yeah, same thing. Yeah.

And if you don't practice your disaster recovery, it doesn't exist. Yeah. Great advice. And then you have recommended reading.

Could be anything from the latest fiction you enjoyed, like Project Hail Mary, I'm going to go on a limb here because a lot of the things you said make me think that you might also be a Matt Levine reader. Are you?

Occasionally, yes. Okay. Yes.

So, I'm going to recommend Matt Levine. His blog Money Stuff is amazing.

Yeah, that's a very good recommendation. And, I probably gave that away with the index funds comments.