Viewing profile — z00b

Hi folks. As the CircleCI CTO, I appreciate your patience here and all the feedback. It's true that we are focused on getting customers moving again over sharing more detailed info…

Hi. You can always email our security team at security@circleci.com Our gpp key is available on our site https://circleci.com/security/ if needed. You can also email me directly at…

Thanks Kevin. We really do appreciate the discussion and, as you would imagine, are rethinking some of our approaches in line with the issues you've raised.

Welp. Wanted to write quickly and made a stupid mistake. Sorry about that Kevin!

Rob Zuber, CTO of CircleCI here. We take security very seriously and are taking a deep look at the issues Kevin raised. We'll save additional commenting until we have gathered more…

We use the LaunchAgent approach. A separate sshd that's spawned there for the build user. We originally tried with named pipes (a process via LaunchAgent), but it made it much hard…

Sure. There's definitely some overlap. Shenzhen is a smaller piece of the puzzle, designed to build and deploy from a single system at the point that a user decides to do so. Disti…