3 ms·
This is not right at all, the hack was due to an outdated Jenkins instance and could have happened regardless of what other software was running on the infrastr
by t3chguy 7y ago
This is not right at all, the hack was due to an outdated Jenkins instance and could have happened regardless of what other software was running on the infrastructure.
- notyourday 7y agoAbsolutely not. There's a zero reason for development infrastructure ( which includes Jenkins ) to have any connection to production outside a well defined "transfer this tarball" to a deploy staging server path during a known deploy window which cannot be controlled via development credentials.