News for hackers. Stuff that matters.
Re:The Hugging Face incident and the road ahead by irthomasthomas on Thursday August 27, 2026 @05:10AM (#49461887)
They gave it a full package manager with internet access. They could have used a local cache and air gapped it, but they chose not too.
Re:The Hugging Face incident and the road ahead by Smaug123 on Thursday August 27, 2026 @09:54AM (#49464967)
They didn’t intend to give it Internet access. Artifactory is a caching proxy which can be scoped to specific package ecosystems, not a general Internet gateway (unless configured that way).