3 ms·
And one that needs a different solution. Update: That a control doesn't solve all problems is irrelevant. By that measure, we would have no controls at all.
by MattPalmer1086 2y ago
And one that needs a different solution.
Update: That a control doesn't solve all problems is irrelevant. By that measure, we would have no controls at all.
- amelius 2y ago> And one that needs a different solution. Does the community have any ideas about that?
- MattPalmer1086 2y agoIf you're asking how we can prevent people breaking in to a source code repository, the answer is mostly just the same as anything. Patch, apply principle of least privilege, make sure everyone uses strong authentication. Monitor the system. For SCM specific controls we could also require signed commits, apply branch protection and any other system specific controls, and enforce code reviews before commit.
- amelius 2y agoThat doesn't sound like a lot of fun, and I wonder if it is reasonable to ask from maintainers who do this work in their spare time.
- amelius 2y agoMaybe in the near future we could have an AI system that: - Connects to HDMI - Monitors any text that's on the screen - Checks that the user is watching the screen (or at least is at the computer) - Checks that any changes committed into the Git repository have been at least on the user's screen for X seconds, while they were sitting near the computer.