Hi,

On Tue, Jun 07, 2016 at 01:27:52PM +0500, ???????? ?????????????? wrote:
> as for Travis-CI builds, there's such possibility already
> 
> 1) register at github.com
> 2) add your own repo to travis-ci.org
> 3) voila, you can attack Pentagon from travis-ci cloud
> 
> the way of "add some attacking code to openvpn codebase" seems to be much
> more complicated

This is not about "attacking other people" - it's about compromising the
integrity of my buildslaves (which could then be used to do anything,
like "host malware downloads" etc).

Is this a very likely scenario, and likely to go undetected?  No :-) - but
still, I'm not opening these systems to Joe Random and his friends.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: signature.asc
Description: PGP signature

Reply via email to