euph0ria
Joined 13 years ago
Karma
940
Submissions
187
Member since
Feb 21
Joined 13 years ago
Does anyone have more information about it? What is the requirements for it to be exploitable and how have you handled it in your stack/distro to protect your assets?
How can we learn the identity of the contributors? How are the contributors vetted? How are we notified if a significant change in leadership happens?
It's just a general problem when relying on GitHub accounts for important code.
For some reason I trust the big vendors to have better safe-guards against things like the questions above. Such as aws linux containers etc..
Would love to hear how other people think around this.
They are known to just cancel accounts and cut access.
It was a three day small task?