Yeah. Build machines should never have had internet access. Any dependencies your product uses should be downloaded once and then cached in your own artifactory. If you don’t, what you deploy in production could be different from what you tested in staging. That can allow attacks like this to happen much more easily.

Not quite. This is 15% of Instagram.

It’s been out for less than ten days and it already has more than 35x the number of total users as Mastodon. It might not be for us, but saying that no one would want to use it is just sour grapes.

Maybe it’ll finally be the year of the Linux desktop.