terrorobe

7 ms·

1. 1.▲
   Removed unencrypted Git protocol and certain SSH keys(github.blog)

   4 points by terrorobe 5y ago|0 comments
2. 2.▲
   by terrorobe 5y ago

   > calling out to services should be a core competency. What’s the typical failure rate of a method call within a process of a language of your choice? If it’s not Java2k it will be one or two orders of magnitude lower than any cross-proc
3. 3.▲
   by terrorobe 5y ago

   Then the brownout had its desired effect. Using unauthenticated transports for code is borderline malicious.
4. 4.▲
   by terrorobe 5y ago

   The main reason to de-emphasize passwords is that they can easily get leaked and can cause long-lasting problems. Forcing automation to use per-service authentication tokens in the form of distinct SSH keys or access tokens allows you to *