4 ms·
> I don't know how Google's or AOSP's build systems are set up, but I'd suspect that not many entities are able to mount a successful supply chain attack on int
by codethief 3y ago
> I don't know how Google's or AOSP's build systems are set up, but I'd suspect that not many entities are able to mount a successful supply chain attack on internal networks.
This classic article might be worth your while:
https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...
- piecerough 3y agoToo bad it's paywall'ed
- codethief 3y agoHere you go, it wasn't always like that: https://web.archive.org/web/20210227105146/https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 https://web.archive.org/web/20210227105146/https://medium.co... :)
- saagarjha 3y agoIt’s much better than that.