2 ms·
>Me as a lowly developer is just not spending time fruitfully by checking github.coms SSH fingerprint ... and when you don't you drive up the probability of en
by Muromec 3y ago
>Me as a lowly developer is just not spending time fruitfully by checking github.coms SSH fingerprint
... and when you don't you drive up the probability of enabling the 4-stage attack that leaks private keys to Chines govt. Of course the probability is only 0.01% and it's worth to spend time on something better. And when you do check and other 1000 devs in the organization don't, what's the point, right?
This is how this stuff happens and we all read a nice post morten here somewhat 2 years later.