Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It actually decreases complexity. Updating 1000 VM servers using these technologies can be made automatic. True, it provides an additional attack surface, but the gains of having everything always patched are well worth it.


Everything does not include your actual app, so yes it's convenient but doesn't really help that much


I'd argue that convenience is a security feature. The easier something is to do, the fewer mistakes you or your team will make.

Stand by my initial post, declarative systems will become more and more popular and will improve security.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: