Re: Mount hobby horse. Charge!!!!!!
@Brewster - the detail in the article is very thin - it says 'This was the system used by a lead developer at the 30-person outfit to generate code' which suggests to me that it wasn't what most would consider a 'secure build environment' - more like some environment you log into. I decided to assume the author knew more than what's been written and go with the spirit of the headline 'Avast urges devs to secure toolchains'. Ie: the build system wasn't secure, and I'd argue was barely deserving of the name.
@everyone - have u not heard of VMware? Teams of 1 can definitely have secure independent build systems.
Biting the hand that feeds IT
