[Nix-dev] Distributing unreleased software

[Michael Raskin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marc Weber wrote:
>>>> Why use Nix if not for zero-risk trying out bleeding-edge stuff?
> You never have zero risk. Eg using a more recent compiler can even
> insecure old kernels ..

I meant zero-risk in another sense: you can always break something or
trigger a vulnerability - let's be honest, you have many ways to do it
with old version, too, even it is called stable. Zero-risk is in another
dimension - you can try something out with full knowledge that you can
switch back to the old tested version. You can take trivial isolation
measures (for bug report traces I sometimes use a user with empty home
directory..) if you fear a program will ruin your profile. The point is
that you can avoid letting it break something, but you can also avoid
letting installation break something.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJLJKVOAAoJEE6tnN0aWvw3UYAIAKsnT7O2NATpUMOnKoh7w5fc
dzLz4BP6jyYqcMfMRgjBS5l46btVnYiLePL/j7GHFt4g+URwYHa/amhHAjchjhtA
RqlE5Y7Yu2Sz4EXT4PxkLjdEQaG/Qir8LaTCrpc/0ZplAtQMUYRQpcOZJSP6hi1w
DKeD7vSAjZO3YJ4EaGRQsglyMY4ZqOANKPki4gkJdKv9cT0jnqJKgyA/Z9mKeGU/
xzmPq8p/wKWXX156war89BMJgS6PEgjDdvmZ9DA1o6afzXqKpXbMK18GmUpqZswa
nOcealn/fYtoe0qab+jeWJzPiAiH4XafR78J0u4H0Vnmc0+BYlbmnfASyPUkJ5M=
=8go+
-----END PGP SIGNATURE-----