3 ms·
Right, and we don't know, which means we should audit aggressively and assume these things may still be open attack vectors. You don't hang out with the backdoo
by vorpalhex 6y ago
Right, and we don't know, which means we should audit aggressively and assume these things may still be open attack vectors. You don't hang out with the backdoor open waiting for your friend to let you know.
- marcosdumay 6y agoI guess that's why they said that they are auditing aggressively their CI tool.
- sudhirj 6y agoWe should, but we should have assumed CI software was an attack vector since before the solar winds hack. It’s always been a vector. This hack doesn’t change anything.