4 ms·

Could you describe any plausible scenario in which one pull request could compromise the entire .gov IT infrastructure?

• jiggy2011 14y ago
  wow, where to begin?
  • LeeHunter 14y ago
    Anywhere. Just one.
    • jiggy2011 14y ago
      exec()
      • LeeHunter 14y ago
        That's just code, not a scenario. Government IT systems are currently subject to oversight, testing, comprehensive threat risk assessments etc. Those controls don't disappear just because the software is open source. Right now it's not possible to just deploy new code, open source or not, into a production environment on a critical piece of infrastructure without review. If anything, the open source code should be significantly more secure, because you have added an additional layer of public review, testing and comment.
        • jiggy2011 14y ago
          Let's hope you are right.. :) The UK gov does not have the best record with IT projects.
• deleted 14y ago
  [deleted]