You have to wonder how much malware you can avoid my just setting your hostname to 'VMWARE': http://t.co/mDYlLbDR
miniblog.
Related Posts
Sometimes, the best way to harden a service is to outsource it.
I've dabbled with running my own CI service for PRs. Running *arbitrary* third party patches is scary. Malware! Crypto miners!
It's really nice not having to worry about that.
If you someone made a concerted effort to put malware in a low level npm package, how hard would it be to detect?
Worryingly, it would be really difficult.
Windows Defender learns new malware definitions without a human involved at all! Really impressive analysis of the arrival of a new piece of ransomware:
