5 ms·
Yes of course, creating a backdoor or sabotage via revision control is a really good attack vector (like really). Recently several large open source projects ha
by wyck 14y ago
Yes of course, creating a backdoor or sabotage via revision control is a really good attack vector (like really). Recently several large open source projects had shady forged commits, so it's safe that say that anything private is also being targeted.
- MattJ100 14y agoApart from Ruby, which?
- Jebus 14y agoYou mean Rails.
- marshray 14y agoWordpress http://wordpress.org/news/2011/06/passwords-reset/ http://wordpress.org/news/2011/06/passwords-reset/
- rmc 14y agoI presume your talking about the github incident. As far as I know that was just a proof of concept. There wasn't an actual, malicious, black hat forged commit, was there?