tomw, 1 month ago xz is not a "trusting trust" attack, it is a "your build tools are too complex for you to understand all the input and output" attack. And guess what: that's very relevant to web development...
xz is not a "trusting trust" attack, it is a "your build tools are too complex for you to understand all the input and output" attack.
And guess what: that's very relevant to web development...
tomw, 1 month ago People worry about backdoored compilers and undetectable exploits and then go and install 100MB of node modules that we assume someone out there is probably checking idk
People worry about backdoored compilers and undetectable exploits and then go and install 100MB of node modules that we assume someone out there is probably checking idk
Add comment