4 ms·
I doubt it's related. DZ left GitLab a while back, and even then his involvement had been limited for quite some time. Knowing GitLab and its history of securit
by YorickPeterse 5y ago
I doubt it's related. DZ left GitLab a while back, and even then his involvement had been limited for quite some time. Knowing GitLab and its history of security vulnerabilities, the timing is probably just a coincidence.
There has also never been any evidence of e.g. state actors sneaking in backdoors and what not. The code review process is quite extensive (probably a bit too much even), so it would be difficult to sneak in vulnerabilities deliberately. It's much more likely these issues are caused by growing complexity and the amount of functionality that GitLab supports.
- wyldfire 5y ago> Knowing GitLab and its history of security vulnerabilities, the timing is probably just a coincidence. You're probably right - unless Ukraine has more GL instances than most countries, in which case I'd be a little less likely to believe it's just a coincidence. Russia is deploying lots of attacks now so regardless of where the software was developed, if it's used in Ukraine at all it's more likely that we will find out about its vulnerabilities in the coming days.
- Sebb767 5y agoIt's only important when GitLab is used in government infrastructure, though. I imagine that most GitLab instances are civilian, in which case attacking them doesn't help Russia much.
- cobertos 5y agoNot if they're instances related to critical infrastructure, like utility software vendors. Or just generally trying to sabotage their economy through hurting commercial entities
- smus 5y agobecause us gov operations are totally divorced from the civilian sector?
- Sebb767 5y agoThe US government is currently very much not involved. And sure, the ua gov will have a GitLab somewhere, but their time is limited and GitLab does not seem like a great value.
- deleted 5y ago[deleted]
- deleted 5y ago[deleted]