this post was submitted on 04 Feb 2026
379 points (98.5% liked)
Programmer Humor
29916 readers
618 users here now
Welcome to Programmer Humor!
This is a place where you can post jokes, memes, humor, etc. related to programming!
For sharing awful code theres also Programming Horror.
Rules
- Keep content in english
- No advertisements
- Posts must be related to programming or programmer topics
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Did you not read the part about n++ not changing/rotating credentials? I think there's enough blame to go around.
They also weren’t doing any kind of SSL verification for the download request, nor were they doing any kind of hash verification or signing. The former would have prevented a redirect attack in the first place, and the latter would have prevented downloaded files from being modified or swapped out.
I did not because the only part I actually cared about was the bullshit clickbait title.
outstanding