Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@linuxxx I'm not saying that the Matrix protocol is insecure - I'll leave determining that to the cryptographers. What I'm saying is that the management of their production infrastructure was sloppy to say the least, and that this hack was to be expected.
1024 points of soldering !!
Wasn't expecting that when I began, but it's quite interesting and the result wil...
Looks like Matrix just got educated on hiding administrative stuff behind a VPN, by the guy (or gal, but those don't exist on the internet) that hacked their production infrastructure. Coincidentally, it reminded me of that time when a dev wanted to educate me, a sysadmin, about VPN's 😄
https://devrant.com/rants/2030041
What I've learned from this incident are 2 things.. well mainly 2 things.
1. Never *ever* entrust developers with production access. Let DevOps take care of the glue that sticks dev and prod together.
2. Trust nobody's competence but your own. Matrix was advertised as "highly secure", and then they do a fuckup like this. Only trust yourself, and ensure that you're in control.
random
y u no use vpn
matrix