2 ms·
I believe my most vulnerable environment is the development environment. 3rd party code being updated almost constantly combined with fairly standardized cli to
by jaxn 4y ago
I believe my most vulnerable environment is the development environment. 3rd party code being updated almost constantly combined with fairly standardized cli to cloud environments (kubectl, az/aws/Heroku, gh, etc.
And I don’t just have to be vigilant about what I do, but also about what my team has done. It terrifies me, and it’s a sad reality that my personal risk is reduced by the fact that if I fall victim, countless other teams will as well.
- mark_l_watson 4y agoI think you are correct. The latest news of unsafe PyPy packages worried me. Not always, but often I prefer development on remote VPS’s. For anything deep learning I pay Google a little bit of money every month for Colab notebooks, save a ton of my own time, and don’t worry about trying random 3rd party libraries. I don’t have this use case anymore, but I used to use very large memory VPS’s with SBCL Common Lisp and Emacs to work on an old project that required lot’s of data in memory - VPS’s are really cheap if you turn them off when not in use. In the 1980s and a bit into the 1990s, I did most things in X Windows - I have thought about how good that would be for secure remote development, but text with tmux, Emacs, etc. is so much less hassle.