HN user

vinilios

6 karma
Posts1
Comments7
View on HN

I guess its actually the package distribution that makes a difference, an apt package such as rimrafall won't ever reach an official debian repository. So in the context of adversary package code execution the weak spot is actually the npm registry policy and not npm packaging it self.

Didn't have much time reading through out the whole article and beyond the analysis of the subject it self, i really enjoyed the way the article was written. Giving the ground on theory and mathematics behind the problem in a way that anyone could understand. Thumbs up for authors writing/educational skills.