gabdpipi

3 ms·

1. 1.▲
   by gabdpipi 5mo ago

   Yeah that’s fair. It’s only as secure as the weakest link. That was one of the promises of wasm was sandboxing npm packages independently. Not sure what happened with that or not but I’d be curious to know now we’ve had a lot of recent supp
2. 2.▲
   by gabdpipi 5mo ago

   It’s not just cryptography when a developers password manager gets compromised and all, the hacker is “in”. If it’s secured by a hardware key, they need to have the key physically. Two step could work as well with the proper Authenticator.
3. 3.▲
   by gabdpipi 5mo ago

   Yeah I was thinking the difference between open source and enterprise to mitigate this is a simple hardware security module right? If the attackers spearfish folks who hold “keys to the castle” and everything is digital it’s game over no ma