4 ms·
I believe it was an insider. I have personal experience delivering software/software updates to the USG. I'm actually baffled as to how something like this ca
by astura 6y ago
I believe it was an insider.
I have personal experience delivering software/software updates to the USG. I'm actually baffled as to how something like this can happen without an insider. I've never had any slight sliver of concern over the security of our supply chains.
- Fordec 6y agoThe said it involved a manual supply chain breach. Sounds like an insider with a USB drive.
- deathhand 6y agoI believe not everyone always checks the checksums. "Never ascribe to malice that which is adequately explained by incompetence"
- DangitBobby 6y agoI'm sure malicious people are very grateful that this platitude is in circulation.
- andrewflnr 6y agoCalling it a platitude is selling it short. Yes, it's a little strained in the context of people trying to deceive you, but the malicious are still vastly outnumbered by the incompetent.
- DangitBobby 6y agoIn general, I agree that most bad things happen by accident, but I think generally it's an unhelpful statement. You should be slightly more suspicious of someone claiming innocence when they clearly experience benefits from the consequences of their actions.
- wyldfire 6y agoWindows checks the signature.
- astura 6y agoMy point was that without in insider there's probably 50 easier ways to drop malware than infiltrate the software supply chains that I've personally been a part of.