Hi folks. As the CircleCI CTO, I appreciate your patience here and all the feedback. It's true that we are focused on getting customers moving again over sharing more detailed information, but will aim to do better in…
Hi. You can always email our security team at security@circleci.com Our gpp key is available on our site https://circleci.com/security/ if needed. You can also email me directly at rob@ if you have an immediate question.
Thanks Kevin. We really do appreciate the discussion and, as you would imagine, are rethinking some of our approaches in line with the issues you've raised.
Welp. Wanted to write quickly and made a stupid mistake. Sorry about that Kevin!
Rob Zuber, CTO of CircleCI here. We take security very seriously and are taking a deep look at the issues Kevin raised. We'll save additional commenting until we have gathered more information. In the meantime, our…
We use the LaunchAgent approach. A separate sshd that's spawned there for the build user. We originally tried with named pipes (a process via LaunchAgent), but it made it much harder for our customers to modify the…
Sure. There's definitely some overlap. Shenzhen is a smaller piece of the puzzle, designed to build and deploy from a single system at the point that a user decides to do so. Distiller provides hosted continuous…
Hi folks. As the CircleCI CTO, I appreciate your patience here and all the feedback. It's true that we are focused on getting customers moving again over sharing more detailed information, but will aim to do better in…
Hi. You can always email our security team at security@circleci.com Our gpp key is available on our site https://circleci.com/security/ if needed. You can also email me directly at rob@ if you have an immediate question.
Thanks Kevin. We really do appreciate the discussion and, as you would imagine, are rethinking some of our approaches in line with the issues you've raised.
Welp. Wanted to write quickly and made a stupid mistake. Sorry about that Kevin!
Rob Zuber, CTO of CircleCI here. We take security very seriously and are taking a deep look at the issues Kevin raised. We'll save additional commenting until we have gathered more information. In the meantime, our…
We use the LaunchAgent approach. A separate sshd that's spawned there for the build user. We originally tried with named pipes (a process via LaunchAgent), but it made it much harder for our customers to modify the…
Sure. There's definitely some overlap. Shenzhen is a smaller piece of the puzzle, designed to build and deploy from a single system at the point that a user decides to do so. Distiller provides hosted continuous…