2·
23 hours agoNOT TERRIBLE
- 0 Posts
- 6 Comments
Joined 3 years ago
Cake day: July 1st, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
1·4 days agoThat’s why the tech people get REAL pissy when talk about limiting access to European markets come up due to national security concerns.
2·8 days agoVPN enrollment is scanning a qr code nowadays. Or site2site, with a "plug this box into your network’ really shouldn’t be an obstacle in the year of the lord 2026
I mean…
With all that’s been known about supply chain attacks and social engineering, targeting especially dev devices…
Why the fuck did that dev have prod credentials laying around readable from the user account?
This is kinda on them. Company handling billions and billions, can’t be arsed to do baseline opsec?
I mean these are basics, even more so considering agentic coding is a thing now. Y’all just letting remote stochastic generators execute code, (and npm packages, vscode extensions) scrape your hard drive? At least put it in a rootless container, mount your repo, and remove all permissions beyond only the files currently being worked on. And ffs, set up a proper firewall.