3 ms·
Looking at how many requests to update to the backdoored version have been made, I wonder if the fact that many people (including developers) have been conditio
by userbinator 3y ago
Looking at how many requests to update to the backdoored version have been made, I wonder if the fact that many people (including developers) have been conditioned to essentially accept updates as "always-good" is a huge contributing factor in how easy it is to spread something like this.
The known unknowns can be better than the unknown unknowns.
- frenchman99 3y agoTotally agree. With things like Dependabot encouraged by GitHub, people now get automated pull requests for dependency updates, increasing the speed of propagation of such vulnerabilities.