3 ms·
Mudge probably wanted things to similar to banks: 1) I don't think having a single mono-repo and everyone having access is a major security concern. 2) Employ
by rajeshp1986 4y ago
Mudge probably wanted things to similar to banks:
1) I don't think having a single mono-repo and everyone having access is a major security concern.
2) Employees should only run corporate approved software.
considering he only worked there for 8 months, I doubt how much his information is credible.
- PeterisP 4y agoI'm not reading the report as stating that everyone having access to the whole mono-repo is a security concern, but rather that the majority of people had unrestricted access to production systems. It's one thing to be able to read all of the code, it's entirely another thing to be able to deploy arbitrary changes to production without a review.