logoalt Hacker News

arccytoday at 2:23 PM1 replyview on HN

the malware need not actively create a release like a worm, it can just infect every build and if you don't check carefully, your next regular release will contain it.


Replies

red-iron-pinetoday at 4:07 PM

is one of the reason we fight holy wars for SSO and strict login rules even for Dev or QA environments -- if you can get in during a dev build you can get stuff in there that carries through.

maybe QA will find it... but they're testing X number of JIRA tickets based on Y epics and if it's not on the list they're not looking...