“You’re as secure as the least secure laptop which can push code at any of your dependencies” not broadly adjusted to in tech yet.
https://twitter.com/ag_dubs/status/1376547776704737283
And this doesn’t even require malfeasance on behalf of the OSS contributor.
A great deal of the effort to secure my laptop is because of what the laptop could do in someone else’s hands; the world has many laptops and few people paid to secure them constantly.
A great deal of the effort to secure my laptop is because of what the laptop could do in someone else’s hands; the world has many laptops and few people paid to secure them constantly.
“What’s the drill if an engineer’s laptop is in a car which is broken into?”
“They won’t be able to log in, because we force a password prompt. But even if they could, would have to elevate privileges to push code. And we’d nuke box / roll chefs when they reported it gone.”
“They won’t be able to log in, because we force a password prompt. But even if they could, would have to elevate privileges to push code. And we’d nuke box / roll chefs when they reported it gone.”
“And what’s the drill if the engineer doesn’t work for us?”
“Uh we hope we learn about it via Twitter before the code hits prod.”
“Uh we hope we learn about it via Twitter before the code hits prod.”
• • •
Missing some Tweet in this thread? You can try to
force a refresh
