370

ed posting (lemmy.blahaj.zone)

submitted 4 days ago by not_IO@lemmy.blahaj.zone to c/programmer_humor@programming.dev

61 comments fedilink hide all child comments

https://bsd.network/@ed1conf/116001607814914844

you are viewing a single comment's thread
view the rest of the comments

[-] Cort@lemmy.world 17 points 4 days ago

Did you not read the part about n++ not changing/rotating credentials? I think there's enough blame to go around.

[-] PM_Your_Nudes_Please@lemmy.world 11 points 4 days ago

They also weren’t doing any kind of SSL verification for the download request, nor were they doing any kind of hash verification or signing. The former would have prevented a redirect attack in the first place, and the latter would have prevented downloaded files from being modified or swapped out.