News for hackers. Stuff that matters.

A comment on Docker Hub Hacked – 190k accounts, GitHub tokens revoked, builds disabled. Parent comment

Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by rectang on Saturday April 27, 2019 @12:54AM (#19763865)
Maybe some day we'll get serious about reproducible builds, since reproducibility can serve as a layer of defense against such compromises.
[ Parent | on HN ]
Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by ohyeshedid on Saturday April 27, 2019 @03:05AM (#19764259)
Maybe I'm missing something, but reproducible builds wouldn't be that helpful here with write access to the source repo, no?

Definitely wouldn't have helped prevent the compromise.

[ Parent | on HN ]
Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by Svenstaro on Saturday April 27, 2019 @03:36AM (#19764358)
True, but they allow you to find out whether any Docker images have actually been compromised.
[ Parent | on HN ]
Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,... by debiandev on Saturday April 27, 2019 @06:19AM (#19764829)
Debian is already using reproducible builds.
[ Parent | on HN ]