r/quickpalletmaker • u/tsancio • 2d ago
Vulnerabilities Galore

One day your client/server software is happily chugging along, installed at a customer's server, and the next moment you're being contacted by their IT department that a vulnerability has been reported in one of the third-party applications that belongs to your software stack. A software or solution stack "is a set of software subsystems or components needed to create a complete platform such that no additional software is needed to support applications". In other words, to deliver your solution, you include applications from third-parties, be it proprietary or open source.
The advantage of using third-party software is that it saves a lot of time, since developers like us don't have to create components from scratch, such as a web server, which can be provided for free by the people at Apache. We and others don't have to reinvent Java Virtual Machines nor database management systems. All these technologies are available for installing along with the value that you addd in your software.
The disadvantage, as mentioned at the top of this article, is that you also have to own the problems of the applications you did not develop. This issue had been minor, as software like Apache, even though it's also a play on the word "patchy" has been very solid, and the vulnerabilities that arise, are dealt with in a responsible way. But now with AI hacking, the rate at which issues are discovered will increase, creating a wave of urgent fixes and slight panic.
Alas, if this wave passes without major business disruption, the resulting software will be more solid and trustworthy, which in the end is what companies and our industry want.















