4 ms·
Clone? More like hackers will use this to test vulns offline and make even more elaborate hacks against customers of circleci.
by alfalfasprout 4y ago
Clone? More like hackers will use this to test vulns offline and make even more elaborate hacks against customers of circleci.
- fexecve 4y agoWeb software is incredibly simple. Having someone's ruby code doesn't really help you much. Hackers just try a few SQL injections, stuff script tags into all of the form fields, and call it a day. More advanced hacks on webapps are virtually unheard of. Certainly custom-designing a hack for some company isn't going to happen. It's a waste of time, because chances are you won't find some complicated hack that wasn't already exposed through the spamming techniques I mentioned above. And most larger, "worthwhile" companies tend to run their own in-house CI and not use Circle.