3 ms·
I thought Google’s security is so impeccable that getting a reproducible RCE on engineering workstations doesn’t matter? https://news.ycombinator.com/item?id=35
by formerly_proven 3y ago
I thought Google’s security is so impeccable that getting a reproducible RCE on engineering workstations doesn’t matter? https://news.ycombinator.com/item?id=35581532 https://news.ycombinator.com/item?id=35581532
- cavisne 3y agoThis is exactly the sort of attack this change is helpful for, as pip would not work at all on these machines. Probably the only way to stop these “social engineering” (as google characterized it) attacks.
- hgsgm 3y agoThe scariest part of that thread is the many people saying that closing your eyes and yelling "zero-trust" means that you don't need to protect your devices from compromise.