News for hackers. Stuff that matters.

A comment on CircleCI trusts 8 analytics companies with your source code and API tokens. Parent comment

Re:CircleCI trusts 8 analytics companies with your source co... by remcob on Tuesday October 10, 2017 @03:29PM (#15444659)
In the interest of said discussion, I would appreciate a write-up of the rationale behind the approach chosen, when you are ready. It could help others that are in a similar situation. Perhaps inspire a better practice in the industry.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by ssemmaprise on Wednesday October 11, 2017 @12:11AM (#15447223)
Hi there, we wrote up our thoughts + reply here: https://discuss.circleci.com/t/circleci-response-to-kevin-bu... Thanks all for your thoughts + comments.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by politician on Wednesday October 11, 2017 @12:56AM (#15447392)
Thanks for putting this together.

You mention vetting third party scripts, but did not explain how your app is not vulnerable to those scripts being hacked or modified in the future. This vulnerability seemed to be the main point of Kevin's piece.

Could you update your post to address that issue?

[ Parent | on HN ]