I don't care what your board of directors thinks. They aren't responsible here; you are.
I don't care what some briefcase-wielding salesman says you can “optimize” or “pivot to”. He won't bea...
And no, making programmers jump through hoops to publish their code isn't a solution either.
When I ended my brief stint maintaining an #npm package, they were cranking up the authentication requirements already. By now, they probably require a verification can and a stool sample every time you want to publish.
This has done ABSOLUTELY NOTHING to prevent supply chain attacks. Maintainers are still getting phished. Exhaustion has deprived them of vigilance.
#security #cybersecurity #infosec
When I ended my brief stint maintaining an #npm package, they were cranking up the authentication requirements already. By now, they probably require a verification can and a stool sample every time you want to publish.
This has done ABSOLUTELY NOTHING to prevent supply chain attacks. Maintainers are still getting phished. Exhaustion has deprived them of vigilance.
#security #cybersecurity #infosec
1
