CircleCI trusts 8 analytics companies with your source code and API tokens

Re:CircleCI trusts 8 analytics companies with your source co... by otterley on Wednesday October 11, 2017 @12:34AM (#15447306)

How do you know it was a conscious decision, as opposed to ordinary human oversight? As the old saying goes, never ascribe to malice what can be adequately ascribed to incompetence. (Though I wouldn't go so far as to call CircleCI "incompetent" -- security issues are rampant in this industry, despite everyone's best efforts.)

[ Parent | on HN ]

Re:CircleCI trusts 8 analytics companies with your source co... by rapind on Wednesday October 11, 2017 @03:01AM (#15447778)

I'd say it's more of a tossup. I mean they write software for people who write software.

I think we can rule out a malicious decision regardless though. I'd wager if it was flagged by the annoyingly pedantic but super smart developer, then it's still sitting in their Trello board buried under a few hundred features that were considered a higher priority by the product manager. In this case, the decision felt mostly harmless.

Or yeah, probably just as likely that no one noticed.

[ Parent | on HN ]