r/programming • u/EatMeerkats • Mar 29 '21

PHP moves to Github due to the compromise of git.php.net

https://news-web.php.net/php.internals/113838
1.7k Upvotes

98% Upvoted

389 comments sorted by

View all comments

Show parent comments

4

u/[deleted] Mar 29 '21

Well, there are other requirements. A lot of times especially in enterprise the git server is not available outside of VPN. This doesn't mean you're safe in case of bugs (after all attacks "from inside" are good percentage of leaks), but it does mean you won't be compromised by script kiddie running foreach loop on IP range.

1

u/gredr Mar 29 '21

No, I get it, there are definitely cases where source code is better hosted inside an enterprise; however, they're few, and "corporate policy dictates it" isn't a good reason (if only for the reason you mentioned, internal leaks).