Re:Matrix.org hacked
by t3chguy on Friday April 12, 2019 @05:50AM
(#19643444)
This is not right at all, the hack was due to an outdated Jenkins instance and could have happened regardless of what other software was running on the infrastructure.
[ Parent
| on HN ]
Re:Matrix.org hacked
by notyourday on Friday April 12, 2019 @06:13AM
(#19643531)
Absolutely not. There's a zero reason for development infrastructure ( which includes Jenkins ) to have any connection to production outside a well defined "transfer this tarball" to a deploy staging server path during a known deploy window which cannot be controlled via development credentials.