News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by salawat on Monday January 10, 2022 @02:48PM (#29880864)
You do not have a right to basic safety when you divest yourself of basic precautions any reasonable actor would have taken. A reasonable actor checks new code pulled down to ensure it actually works. You accept the risk integrating in a stranger's code without mirroring/audit.
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by wtallis on Tuesday January 11, 2022 @01:38AM (#29888333)
The legal profession tends to take a more permissive stance when determining the limits of what's "reasonable", as can be seen from how the phrase "moron in a hurry" has become a term of art.
[ Parent | on HN ]