“The guy” controls a pipeline that did not sanitize its inputs.
The DB equivalent is letting a drop table statement run against prod.
It’s where supply chain attacks occur.
Full transparency would mean opening their code, CI/CD pipelines; all their tech stack would be public. So yes, that is what I want. Not this South Park “we are so sorry.”
This all really should be openly available and accountable to public scrutiny if we’re going to call it the future of the internet.
The DB equivalent is letting a drop table statement run against prod.
It’s where supply chain attacks occur.
Full transparency would mean opening their code, CI/CD pipelines; all their tech stack would be public. So yes, that is what I want. Not this South Park “we are so sorry.”
This all really should be openly available and accountable to public scrutiny if we’re going to call it the future of the internet.