20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

Re:20GB leak of Intel data: whole Git repositories, dev tool... by andreareina on Thursday August 06, 2020 @11:36PM (#24077873)

Not hard to win if everyone is being reasonable. Given an auditor that thinks all uses of MD5 are proscribed, what would you put the odds of them being reasonable at?

ETA: per 'kbenson it's not hard to conceive of a situation where proscribing MD5 is reasonable. Taking 'skissane's account at face value is probably reasonable, but my implicit assumption that the auditor would not explain if pressed isn't being charitable.

[ Parent | on HN ]

Re:20GB leak of Intel data: whole Git repositories, dev tool... by reallydontask on Friday August 07, 2020 @01:51AM (#24078792)

indeed

Specially with the audit/pen test theatre where they have to put something in the report, otherwise why are they getting paid £20K for two days work?

So most people choose the past of least resistance, when it doesn't matter much, so that you fight where it does.

[ Parent | on HN ]

Re:20GB leak of Intel data: whole Git repositories, dev tool... by waheoo on Friday August 07, 2020 @01:20PM (#24084321)

Picking your battles is something we all need to learn to do.

I for one like to pick the easy wins, like this.

[ Parent | on HN ]