i think it's cute how "supply chain attack" essentially boils down to "popular software gets installed on many machines" as both a "vulnerability" and the entire purpose of software distribution systems.

aeva

i am forever grateful that as a game developer my job mostly involves problems that are at least theoretically solvable lol

demofox

@aeva latest game dev problem: I want you to average the location of these 10 points in 2d space, but the 2d space wraps around.

aeva

it's surreal watching infosec people discuss "supply chain attacks" like "hrmuph if *I* were in that position I'd have done [something substantially more awful]" as if 1) writing software people actually want to use is this wild power fantasy and 2) using that position of trust to fuck over a lot of people is somehow the obvious and natural thing to want to do instead of, like, fixing bugs or working on cool new features

Simon Richter

@aeva can't attack the supply chain if no updates are published after release. 🧠

Forum Federato

i think it's cute how "supply chain attack" essentially boils down to "popular software gets installed on many machines" as both a "vulnerability" and the entire purpose of software distribution systems.