Viewing profile — gabdpipi

Yeah that’s fair. It’s only as secure as the weakest link. That was one of the promises of wasm was sandboxing npm packages independently. Not sure what happened with that or not b…

It’s not just cryptography when a developers password manager gets compromised and all, the hacker is “in”. If it’s secured by a hardware key, they need to have the key physically.…

Yeah I was thinking the difference between open source and enterprise to mitigate this is a simple hardware security module right? If the attackers spearfish folks who hold “keys t…