Episode 211 - The only thing harder than signing files is managing users

<p><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href= "https://twitter.com/kurtseifried" rel= "nofollow">Kurt</a> talk about the Microsoft 2 year old signature bug and Github no longer processing MFA resets for free users. Signing things is hard, but trying to manage users and infrastructure at scale is even harder.</p> <p><span style="font-size: 14pt;">Show Notes</span></p> <ul> <li><a href= "https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/" rel="nofollow">Microsoft signed jar bug</a></li> <li><a href= "https://about.gitlab.com/blog/2020/08/04/gitlab-support-no-longer-processing-mfa-resets-for-free-users/" rel="nofollow">GitLab Support is no longer processing MFA resets for free users</a></li> <li><a href= "https://www.technadu.com/someone-hijacking-tor-exit-nodes-conduct-mitm-attacks/173089/" rel="nofollow">Someone Is Hijacking Tor Exit Nodes to Conduct MITM Attacks</a></li> </ul>