3 ms·
All a guess, but I think this impacts CI providers more than anything because they are running Xcode for arbitrary projects. If I were a CI provider I’d probabl
by elpakal 5y ago
All a guess, but I think this impacts CI providers more than anything because they are running Xcode for arbitrary projects. If I were a CI provider I’d probably be nervous.
And also once Xcode is patched, all of our teams are going to have to update immediately and that wipes out a whole day of work.
But again, just guessing here.
- gregoriol 5y agoIf the CI runs the build of arbitrary projects, it already has a huge vector surface for attacks: xcode projects can contain shell scripts, ... So xcode's App Store submission components having log4j won't likely allow for more exploits of CIs or local devices