Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Gitlab – Static passwords set during OmniAuth-based registration (CVE-2022-1162). Parent comment
Like this?
> cc @gitlab-com/gl-security/appsec
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/76318#...
I do so desperately hope it doesn't come across as throwing shade, because hindsight-2020-etc, but I do also think there was some kind of weird process breakdown here because this change somehow slipped past a "4 eyes" and an appsec review phase
There are no comments on this comment yet.
Like this?
> cc @gitlab-com/gl-security/appsec
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/76318#...
I do so desperately hope it doesn't come across as throwing shade, because hindsight-2020-etc, but I do also think there was some kind of weird process breakdown here because this change somehow slipped past a "4 eyes" and an appsec review phase