3 ms·
What checks do you perform on that upstream code before building and running it? I imagine a supply-chain attack would be devastating, even if the code only mad
by tatersolid 6y ago
What checks do you perform on that upstream code before building and running it? I imagine a supply-chain attack would be devastating, even if the code only made it to canaries. Your build infrastructure at least could easily be compromised by a nefarious makefile addition.
- kentonv 6y agoSomeone would have to get a malicious patch merged into Google's V8 release branch first. I also personally do a sanity-check review of the patches before rolling out the update.