News for hackers. Stuff that matters.

A comment on Curl doesn't add libproxy due to its quality issues. Parent comment

Re:Curl doesn't add libproxy due to its quality issues by 2fast4you on Sunday October 23, 2022 @09:25AM (#33306809)
Why would the test dependencies have access to production secrets? They only get installed while developing
[ Parent | on HN ]
Re:Curl doesn't add libproxy due to its quality issues by hombre_fatal on Sunday October 23, 2022 @10:12AM (#33307165)
They still get run on a developer’s machine most of the time and are at least installed there where they can run arbitrary code on install. And there are juicy secrets beyond just production server secrets sitting on your laptop.
[ Parent | on HN ]