News for hackers. Stuff that matters.
Re:Backdoor in event-stream library dependency by floatingatoll on Monday November 26, 2018 @12:08PM (#18534809)
Most users of dependencies will never consider whether to trust those dependencies at all.

If you’ve considered the problem and decided to trust them as a compromise to reduce staffing and costs, that’s a fine outcome in my book.

How many health/medical startups are blindly trusting dependencies today, having never thought through the harm I describe?

There are no comments on this comment yet.