4 ms·
Can you elaborate on how you see this as an integrity problem? A new malicious version was released; at no point did the attackers represent their new release a
by daxelrod 8y ago
Can you elaborate on how you see this as an integrity problem? A new malicious version was released; at no point did the attackers represent their new release as the same code as the previous release.
- vemv 8y agoWhen you "git all the things", upgrading a dependency can equal a `git diff`. Upgrades become reviewable. I envision a future where organisations routinely review upgrades.