News for hackers. Stuff that matters.

A comment on Backdoor in event-stream library dependency. Parent comment

Re:Backdoor in event-stream library dependency by 83457 on Monday November 26, 2018 @09:50PM (#18538920)
I think what you just described are platforms where you don't have to trust strangers.
[ Parent | on HN ]
Re:Backdoor in event-stream library dependency by swsieber on Monday November 26, 2018 @10:13PM (#18539022)
Yes, and I think they meant to. Node isn't one of those.

Edit: partially because of design decisions around package permissions.

[ Parent | on HN ]