4 ms·
> The perfect candidate to succumb to this type of “spray-and-pray” supply chain attack is a Ruby developer whose environment of choice is a Windows system that
by bhaak 7y ago
> The perfect candidate to succumb to this type of “spray-and-pray” supply chain attack is a Ruby developer whose environment of choice is a Windows system that’s also periodically being used to make BitCoin transactions. A rare breed indeed.
Very rare indeed. I suppose every package had their own BTC address. I wonder how much they got away with.
But I thought rubygems does a similarity check for names and reject or flag them for manual verification if the name is too similar to an existing one?
- Techies4Trump 7y agoThere are far more effective ways of stealing (or scamming) bitcoin. The point is the attacker could put any kind of malicious payload in here.