Supply chain

Backdooring Git (DEF CON 23)

DEF CON 23 talk (2015), also given at ToorCon 17 and ROOTCON 9, on cryptographic weaknesses and supply-chain attacks through Git internals, and how they put development pipelines at risk.

Read More