3 ms·
That's like complaining the yaml.org site was defaced, so we shouldn't use yaml.
by theelous3 7y ago
That's like complaining the yaml.org site was defaced, so we shouldn't use yaml.
- gruez 7y agoAFAIK the CI server was also compromised, so it's more serious than some website being defaced.
- Arathorn 7y agothe CI server that was compromised was used (mainly) for running tests rather than builds. we don't believe that any builds were compromised. https://matrix.org/blog/2019/05/08/post-mortem-and-remediations-for-apr-11-security-incident/ https://matrix.org/blog/2019/05/08/post-mortem-and-remediati... has the full details, but yes: just because the project's infrastructure got breached doesn't mean that the protocol or wider network was affected: it wasn't.