Hirom

u/Hirom@beehaw.org
88 posts · 252 comments

Recent posts

Recent comments

The write up is disingenuous, or confusing at best. It highight early on "no evidence that end user vault data was accessed or at risk".

Then further down recommends to "Rotate any secrets that may have been exposed..." and "Review GitHub activity, CI workflows, and related credentials for unauthorized access or changes".

How could they even find evidence of end user data and vault being accessed? The CLI compromises affects end user systems, which they have no visibility into.

The worst is saying there's no evidence of risk, while making recommendations based on the assumption all data and secrets on affected systems may be compromised. That's a good assumption because there's definitely a risk.

on OOP at home: · c/programmer_humor · 3 pts · 201d

Separating data structure from implementation has benefits.

In languages with classic OOP classes and objects, it's often necessary to write wrappers or adapters to allow new operations on existing objects. This adds overhead and require more code.