For someone who claims to have done all that, it seems odd they blame curl for the solarwinds hack... I’m guessing the idiot went through the source of some exploit dump and just decided that whoever was in the license files was the one who wrote the root kit. Because everyone knows malware authors leave their real email address in their payload.
“I will slaughter you”
131–140 of 265 posts
Re: “I will slaughter you”
#132I have dealt with a similar situation, in a sense more than once, and my strategy was to first integrate the identified risk into my model and then compare it against my own risk profile. If the risk was above a threshold (simplifying), I take an offensive posture in cases like these.
For example, in this case, I would minimally identify and locate the individual responsible for the email. I think that is doable.
Re: “I will slaughter you”
#133I have nothing but respect for Daniel, but having a domain like haxx.se while being a maintainer of a general purpose powerful and popular(!) software tool is not smart.
This liability could've been mitigated to some degree by having a more innocuous sounding domain name. Having it as is, given enough time and thanks to the tremendous popularity of libcurl/curl someone somewhere is going to jump to conclusions that Daniel is responsible for making this "race car" hacking tool that script kiddies are now using to wreck his life.
Stalman has failed culturally, distance yourself from the "hacking" culture of the past if you care about your marketability and reputation.
Re: “I will slaughter you”
#134Earlier quoted context omitted.
I once tried to have a conversation with a women who tried to drive me and my bicycle off the bus lane (where she shouldn't be driving in the first place); and shouted "fuck off you pissy little cunt" to me. For some reason I thought that if I explained my perspective, she would understand. It ended up with a broken back wheel (she kicked it) and a damaged phone (she took it out of my hand when I wanted to take a pic…
A sad sentiment of giving up, but I think it is premature to abandon your approach. I think it may be worth trying for that small-ish fraction (call it 10%?) of people who can be talked back from their anger. Those are good conversations to have for both parties, and worth trying to have, even if it results in failure 90% of the time. That said, I think the real lesson for you is: don't make yourself more vulnerable…
>A sad sentiment of giving up, but I think it is premature to abandon your approach. I think it may be worth trying for that small-ish fraction (call it 10%?) of people who can be talked back from their anger. Those are good conversations to have for both parties, and worth trying to have, even if it results in failure 90% of the time.
Please do not give terrible advice that will kill people.
Re: “I will slaughter you”
#135Earlier quoted context omitted.
I once tried to have a conversation with a women who tried to drive me and my bicycle off the bus lane (where she shouldn't be driving in the first place); and shouted "fuck off you pissy little cunt" to me. For some reason I thought that if I explained my perspective, she would understand. It ended up with a broken back wheel (she kicked it) and a damaged phone (she took it out of my hand when I wanted to take a pic…
A sad sentiment of giving up, but I think it is premature to abandon your approach. I think it may be worth trying for that small-ish fraction (call it 10%?) of people who can be talked back from their anger. Those are good conversations to have for both parties, and worth trying to have, even if it results in failure 90% of the time. That said, I think the real lesson for you is: don't make yourself more vulnerable…
It's tautologically true that for any X, if you don't try to do X, you won't succeed. But, you also have to weigh whatever good may come of success against the probability and potential consequences of failure. In cases like these, you're by definition dealing with someone who is a little off mentally, whether that's just a temporary condition (e.g. having a bad day), or serious mental illness. Such people can tend to be unpredictable as a result, which is dangerous in its own way.
So, yes, I agree with you somewhat, but I think the balance of consequences tends to favor not acting in cases like this rather than attempting to do anything.
Re: “I will slaughter you”
#136Unfortunately this is what a mental health problem looks like. Our society is ill trained to identify and deal with this category of heart breaking disease.
This mental health problem is called defense contracting.
Re: “I will slaughter you”
#137Unfortunately this is what a mental health problem looks like. Our society is ill trained to identify and deal with this category of heart breaking disease.
I mean he could just be a shitty person who’s bad at their job? I think it’s likely there’s something wrong, sure, but sometimes I worry about this constant rush to associate bad behaviour with mental illness, when none of us are psychologists and we’re certainly not that persons psychologist.
Not picking on you specifically, just musing, btw
Re: “I will slaughter you”
#138The general demeanor of that person, some of the lingo used like "rooting" or "federal server hijacking", the fact that in the screenshot he's using some text editor with ads in it to browse the offending code combined with the fact that he doesn't know what Curl is (if he did he wouldn't have sent this e-mail) screams "script kiddie" to me. I'm not sure whether this person is actually responsible for a multi-million…
My bet is on GPT-2 (GPT-3 would probably generate better text). This whole reply just isn't coherent (first it's a defence contract, then it's learning software for kids?). So either AI generated or someone with some mental illness.
Yeah, I have a seriously hard time believing someone responsible for a multibillion dollar defence project writes that shit.
Re: “I will slaughter you”
#139As per other advice, mental illness, best case is to ignore, the world is to big to help everyone online personally.
> JS Stochastic templating utilizing comparison expressions to write to data registers
This has zero meaning? I can't even guess what it might be?
> I lost over $15k in prototyping alone from bullshit rooting to the charge arbitrators.
"charge arbitrators" is not a thing. It's normally verb, noun. Not adjective, noun.
I'd almost go a nasty GPT-2/GPT-3. There's complexity but no links, this is 3 unrelated things - "Multiple Sigover attack vectors utilizing favicon XML injection"
Re: “I will slaughter you”
#140Earlier quoted context omitted.
I am pretty sure they are not even a script kiddie... they are just a fairly immature troll. Not sure what caused the original email, but the reply is just a copy/paste of various unrelated things and security incidents that the person Googled without even understanding enough about them to form a comprehensible narrative. Which tells me they are simply trying to get a rise out of someone. The way the grammar is cons…
Not sure about the pre-teen part: it sounds more like someone who's not english native; and he mentions losing "his country".
I doubt this is real. The dude is attaching screenshots from his iPhone...