Hacker News Reader

This. You are just swapping bugs that are known (and that in 99% of the cases do not affect you) with bugs that are not yet known (because of being always on tip release), for the sake of not willing to spend time checking if you actually need to upgrade. It does not correspond to higher security but rather a russian roulette game where you swap bullets with newer variants, all the time.

View on HN

Agreed, but working out which are needed and which are safe often takes more time than simply rolling with the new release

Yes, the tradeoff to get better security is more effort and more process.

In all the years since it was rolled out, I’ve seen hundreds of security warnings but absolutely none was remotely close to a real security issue.

This way you do not run software with less security issues, just software with not-yet-discovered ones.

Create a GitHub native tools suite for LTS management of all releases of all languages/platforms, then we are talking about security.

Reply on news.ycombinator.com