Posted by smalltech 4 days ago
Even if you don’t understand the security concerns of running some 3rd party’s scripts on a work device, more pedestrian situational awareness should have prevented such a wild misjudgment?
What the fuck? On a target as big as Binance? Every developer should be treated as a liability and never be able to deploy by themselves.
I wouldn't be surprised if the guys they compromised were high-level staff engineers with the keys to the kingdom so to speak so they found a loophole. Security is hard because the attack only needs one chance to get it right -- and defense needs to get it right every single time.