cyberbender's comments

On: PyPI: Expanding Trusted Publisher Support

[cyberbender]

This is great; the less long-lived credentials the better!

Now developers just need to make sure they secure their code at the pipeline level. Pipeline compromise = package compromise.

On: Solving the minimum cut problem for undirected gra...

[cyberbender]

Wow, I remember attempting to do this in University...glad someone much smarter than me figured it out :)

On: The biggest source of waste is untapped skilled pr...

[cyberbender]

I've seen this firsthand...I think it is less of an issue at smaller companies where taking initiative and leaning into their intelligence is less politically restricted. At large organizations, often it requires too much energy for them navigate the bureaucracy and tap into their potential.

On: Amazon Echo Hacking Wiki

[cyberbender]

Does anyone know if Amazon can push patches down to these devices? Or are they forever vulnerable once the issue is discovered?

[stacktrust → cyberbender]

Yes, they update firmware and the version is reported in the Alexa app.

GPL source code for Echo devices: https://www.amazon.com/gp/help/customer/display.html?nodeId=...