News for hackers. Stuff that matters.
Re:Matrix.org hacked by t3chguy on Friday April 12, 2019 @05:50AM (#19643444)
This is not right at all, the hack was due to an outdated Jenkins instance and could have happened regardless of what other software was running on the infrastructure.
Re:Matrix.org hacked by notyourday on Friday April 12, 2019 @06:13AM (#19643531)
Absolutely not. There's a zero reason for development infrastructure ( which includes Jenkins ) to have any connection to production outside a well defined "transfer this tarball" to a deploy staging server path during a known deploy window which cannot be controlled via development credentials.