2 ms·
Everyone is in such a rush to get their project out the door, no one has time to generate a key and properly code sign releases and begin developing a more secu
by righthand 2y ago
Everyone is in such a rush to get their project out the door, no one has time to generate a key and properly code sign releases and begin developing a more secure chain. Now we have JS package "whatever code" ecosystem but for Rust. As if we haven't watched NPM get hacked many times over the last decade or so.
- mcflubbins 2y ago> Everyone is in such a rush to get their project out the door This is the cause of so many issues. And its not like we're at war or trying to cure the next pandemic, we're writing CRUD apps and trying to convince people to click on adds for crap they don't need.
- arp242 1y ago> As if we haven't watched NPM get hacked many times over the last decade or so. When has this happened? The only one I remember is the event-stream thing, and that was what, over five years ago? Doesn't seem all that common from what I can see?