4 ms·
> if GitHub disables one because a malicious commit was merged then you've taken down an entire ecosystem. Maybe that should be an opportunity for introspectio
by gertop 3y ago
> if GitHub disables one because a malicious commit was merged then you've taken down an entire ecosystem.
Maybe that should be an opportunity for introspection into the house of card we've collectively built as software engineers.
- raincole 3y agoMaybe Github should at least move it to a new URL so people can learn from this security case first hand.
- kelnos 3y agoMaybe we shouldn't rely on a corporation owned by Microsoft (of all companies, jeez) for essential parts of our open-source infrastructure.
- J-Kuhn 3y agoWe know that we build a house out of cards: https://xkcd.com/2347/ https://xkcd.com/2347/