z00b

6 ms·

1. 1.▲
   by z00b 4y ago

   Hi folks. As the CircleCI CTO, I appreciate your patience here and all the feedback. It's true that we are focused on getting customers moving again over sharing more detailed information, but will aim to do better in providing a bit m
2. 2.▲
   by z00b 9y ago

   Hi. You can always email our security team at security@circleci.com Our gpp key is available on our site https://circleci.com/security/ if needed. You can also email me directly at rob@ if you have an immediate questio
3. 3.▲
   by z00b 9y ago

   Thanks Kevin. We really do appreciate the discussion and, as you would imagine, are rethinking some of our approaches in line with the issues you've raised.
4. 4.▲
   by z00b 9y ago

   Welp. Wanted to write quickly and made a stupid mistake. Sorry about that Kevin!
5. 5.▲
   by z00b 9y ago

   Rob Zuber, CTO of CircleCI here. We take security very seriously and are taking a deep look at the issues Kevin raised. We'll save additional commenting until we have gathered more information. In the meantime, our security policy and
6. 6.▲
   by z00b 12y ago

   We use the LaunchAgent approach. A separate sshd that's spawned there for the build user. We originally tried with named pipes (a process via LaunchAgent), but it made it much harder for our customers to modify the build command withou
7. 7.▲
   by z00b 12y ago

   Sure. There's definitely some overlap. Shenzhen is a smaller piece of the puzzle, designed to build and deploy from a single system at the point that a user decides to do so. Distiller provides hosted continuous integration, building y