Re:Backdoor in event-stream library dependency
by floatingatoll on Thursday November 29, 2018 @02:03AM
(#18558602)
The sale of any business that makes use of cryptography will generally include the private keys and passwords necessary to ensure business continuity. Code signing would not necessarily protect you against a human-approved transfer of assets as occurred here, whether as part of a whole-business sale or as a simple open-source project handoff.
[ Parent
| on HN ]
There are no comments on this comment yet.