6 ms·

this stunt will cost Github five to six figure It will cost its customers a lot more to reaudit all their commits from the date they migrated to GitHub. How ca

by teyc 15y ago

this stunt will cost Github five to six figure It will cost its customers a lot more to reaudit all their commits from the date they migrated to GitHub. How can any one be certain at this stage that there hasn't been a 0-day inserted into their project?

sc00ter 15y ago
How could anyone be certain that there hadn't been a 0-day inserted in their code, even if the method of disclosure had been different?
- teyc 15y ago
  True.
Peaker 15y ago
This makes a strong case for requiring every git commit in general to be signed be the user's key.