4 ms·
> Um, how concerned should I be about this? Not at all. It is another one of the Chicken Little's security theater that sound sexy and sophisticated but in pr
by notyourday 5y ago
> Um, how concerned should I be about this?
Not at all. It is another one of the Chicken Little's security theater that sound sexy and sophisticated but in practice mean nothing.
If you are concerned about this issue you should first ensure that you never type "npm install" or copy something off Stack Overflow into your code.
- acuozzo 5y ago> Not at all. https://github.com/IAIK/rowhammerjs https://github.com/IAIK/rowhammerjs This has existed for years and its use has been observed in the wild. RowHammer isn't new.
- notyourday 5y agoDoes. Not. Work. Against. A. Random. Machine. That. Fetches. It. You pulling 15Gb of Nodejs modules in your app that you have no idea about because you think someone, somewhere ensured that they are "correct" importing a supply chain attacks works every single time.