News for hackers. Stuff that matters.

A comment on Chef-sugar stands its grounds against ICE contract.

Re:Chef-sugar stands its grounds against ICE contract by pnako on Thursday September 19, 2019 @11:15PM (#21023031)
> Earlier today, a former Chef employee removed several Ruby Gems, impacting production systems for a number of our customers.

That's some horrendous infosec. Why would ICE or anyone use this? Can't Chef use, err, Chef or something like that to remove all credentials as soon as employees leave the organization?

[ Parent | on HN ]
Re:Chef-sugar stands its grounds against ICE contract by mwarkentin on Friday September 20, 2019 @09:16AM (#21026307)
It was his own gem, hosted under his own account, not Chef's. It's apparently just relied on by almost the entire Chef ecosystem, including Chef's own systems.
[ Parent | on HN ]