undefined | Better HN

0 pointsTOMDM4y ago0 comments

Even better

Notify someone up the chain that you want to submit malicious patches, and ask them if they want to collaborate.

If your patches make it through, treat it as though they essentially just got red teamed, everyone who reviewed it and let it slip gets to have a nervous laugh and the commit gets rejected, everyone having learned something.

0 comments

stingraycharles4y ago

Exactly what I was thinking. This should have been set up like a normal pen test, where only seniors very high up the chain are in on it.

pm904y ago

I wonder if informing anyone of the experiment would be frowned upon as it might affect the outcome? However, this research doesn’t appear to be fastidious about scientific integrity so maybe you are right.

j / k navigate · click thread line to collapse