8 ms·
My guess is they didn't deploy a new version but rather they used a CDN... for a mobile app... I can't even. Not pinning and not testing is egregious enough bu
by joshstrange 4y ago
My guess is they didn't deploy a new version but rather they used a CDN... for a mobile app... I can't even.
Not pinning and not testing is egregious enough but to use a CDN for a web-based cross-platform app? Absurd.
- Matthias247 4y agoMore specifically: A public CDN whose content they don't own, and that can change at any point in time. If it would be a private CDN which points only to the content they explicitly published as part of a build&release process they wouldn't have the problem. If you rely on public artifacts that others published, all your availability and security guarantees are gone.