3 ms·
Even if you mandated two code reviewers per merge, the attacker can just have three fake personas backed by the same single human and use them to author and app
by cjbprime 3y ago
Even if you mandated two code reviewers per merge, the attacker can just have three fake personas backed by the same single human and use them to author and approve malware.
- Deathcrow 3y agoAlso, in a more optimistic scenario without sockpuppets, it's unlikely that malicious and underhanded contributions will be caught by anyone that isn't a security researcher.