Post

Shai-Hulud doesn't break in. It gets installed, then reads whatever credentials are lying around and ships them off. A hermetic build keeps nothing lying around: no ambient creds, no network. It can't steal what it can't see. Link to full blog: buff.ly/Xw2Jie6