←back to thread

Less is safer: How Obsidian reduces the risk of supply chain attacks

(obsidian.md)
469 points saeedesmaili | 1 comments | 19 Sep 25 22:02 UTC | HN request time: 0.408s | source
Show context
kid64 ◴[20 Sep 25 00:46 UTC] No.45308630[source]▶
'It may sound obvious but the primary way we reduce the risk of supply chain attacks is to avoid depending on third-party code."

What a horribly disingenuous statement, for a product that isn't remotely usable without 3rd-party plugins. The "Obsidian" product would be more aptly named "Mass Data Exfiltration Facilitator Pro".

replies(2): >>45308653 #>>45312733 #
1. gkbrk ◴[20 Sep 25 12:23 UTC] No.45312733[source]▶
> a product that isn't remotely usable without 3rd-party plugins

That's not even remotely true. Obsidian out-of-the-box is very usable, covers pretty much all use cases for a note-taking software.

I've been using it for ages, and I haven't needed to turn on the Community Plugins switch for anything.

Usually the people I see with tons of Obsidian plugins are people who think "just one more plugin" is what stands between them and productivity.