Spyke

Replies

memes

Comment on

No, Keep Them

Reply in thread

Does it have an internal speaker or HDD activity light? Both of those are known exfiltration methods. :)

Hell, even a variable speed fan has been used.

Comment on

Replacement for Docker Content Trust (DCT)

Reply in thread

If you are pulling a docker hub image you already trust the source code, the base image, and the built image.

Building from source means you only need to trust 2 of those things now.

You can mirror the repo to your own corporate forge and run tests to make sure things are OK but at some point you do have to trust someone.