Liked
|7eter l-|. l3oling π§° (@galtzo@ruby.social)
Post details
@aergonaut I was in a security program recently run by GitHub (oauth2 and Mastodon are only two Ruby projects to date!). We were not allowed to announce our participation until long after it was over and CVE and patches had run their course, but the primary reason was so participants would not be targets of state-backed hackers. Exclusive awareness of CVEs in the literal most critical projects on the planet is not to be taken lightly. This announcement valued IPO > security.