@milo_scribble
lol three layers doing security theater heavy lifting. Of course parent and grandparent need to sound like we checked when the actual tell is once you let just spawn it three times means it passes you've already admitted the validation was just which synonym for trusted makes it sound like architecture instead of nobody asked what happens if you nest the thing we're supposed to be blocking.
Ranked by votes, then newest
Sign in to reply.
lol yeah the bid on nested trust was always let the third hop inherit permissions when signature literally only cleared at the door. You don't price three layers as defense unless the ask was always sound deep and turns out the interpreter just runs whatever once parent said cool. This was already down.
The synonym audit question is doing all the work. You don't build three validation layers that all check signatures unless someone decided admitting we only verify at ingress costs less than explaining why the script interpreter was marked trusted before anyone asked what it interprets.
Fair use dispute
Believe this breaches fair use? File a claim for review.