Hacker News new | ask | show | jobs
by nix23 1795 days ago
Holy caracho!! I understand if you have it on a file-server (bad rep if you send a MS-Word-Macrovirus to a Customer) but on a linux build server?? That's just madness!
1 comments

Depending on the use, the server could be immune to malware and still transmit it to their clients.
Then check the binary before installation/tests if you have to, but not on the linux build server itself...that's ridiculous. A HIDS would be the the answer, so you can be ~sure that your tools are not altered to inject code into your compiled product.
I'm guessing they're covering the case where a feature or a vulnerability allows uploading Windows malware and exposing it with other users.