3 ms·
What happens when the entire Australian staff get the order? Usually to sneak something in, you just need a clique of about 2-5 staff to write it, approve the
by woolvalley 8y ago
What happens when the entire Australian staff get the order? Usually to sneak something in, you just need a clique of about 2-5 staff to write it, approve the change and get it deployed.
If the company is large enough, most won't notice the rogue commit, and if %90 of the company gets the order, well good luck!
- jay_kyburz 8y agoIf I were some shady Australian spy organization, I wouldn't just demand an employee write some obvious change that rips open a backdoor, I would have my highly qualified spy programmers write a fix to an existing bug (ticket) in a repository, but inject a subtle bug (buffer overflow, unescaped input), then have a junior programmer commit it to the repository. The junior programmer might not even be able to spot the problem.
- cormacrelf 8y agoI'm pretty sure ASIO et al only pushing so hard for this precisely because they are incapable of that fairly mundane level of sophistication. But yes, they could get better at it and we wouldn't know.
- firecall 8y agoThis is a very good point. I'd only considered it in the context of an individual.