4 ms·
And so perhaps the question that should be keeping the rest of us up at night this week is this: What if this exploit came through a compromised third-party de
by numbsafari 6y ago
And so perhaps the question that should be keeping the rest of us up at night this week is this:
What if this exploit came through a compromised third-party dependency (eg npm or pypy or deb or rpm or docker image) that made its way into SolarWinds CI system?
Is that something the rest of us now face?
- lovecg 6y agoThat’s a very good point. The issues with Npm in particular have been studied: https://news.ycombinator.com/item?id=21111911 https://news.ycombinator.com/item?id=21111911