Daniel here.
Thanks everyone for the positiveness and expression of appreciation I've sensed here. The threat has been reported to the police and I'll move on. I love you all. Now I'll go back and continue working on curl.
“I will slaughter you”
221–230 of 265 posts
Re: “I will slaughter you”
#222Blaming Daniel for being for being hacked is like getting robbed and blames sneaker manufacturers because the robber happen to wear a pair of sneakers.
Re: “I will slaughter you”
#223What a cry baby. It's the internet, get over it.
Re: “I will slaughter you”
#224After reading it a few times, I think it's not about some script kiddie using curl to hack into his system. Although I condemn Al Nocai's method, I feel for him and I am inclined to adopt the contrarian opinion that he probably got screwed because of the bad quality of curl. Curl had some remote exploit last year, and curl is used everywhere as the author reminds (often as libcurl). https://daniel.haxx.se/blog/2020/0…
> When some open-source project has some level of reach there needs to be quality requirements and regular security audits. (like they (last?) did in 2016, https://daniel.haxx.se/blog/2016/11/23/curl-security-audit/ ) I think the key question with that is: It all sounds nice, but who is realistically going to pay for it. _especially_ repeatedly.
How about the companies who need that sort of security audits for the software they rely on?
Re: “I will slaughter you”
#225Earlier quoted context omitted.
We are dealing with a person with mental illness, because nothing is coherent. It's all made up. That's why you don't answer that kind of mail, the goal is to trigger a reaction from you.
^--- This. Every word of it. Two words went through my head reading the response. "Crystal Meth". Likely not, really, but having more-or-less lost an old friend to meth I can't help but compare the similarities (... the "identicalities" actually): - the desperation and paranoia - a solid (but wildly misplaced) basis in reality - the overwhelming externalization of blame - the need to lash out and draw someone else in…
They are all also behavioral attributes of Jehovah's Witnesses and antisocial/Narcissistic personality disorders.
Re: “I will slaughter you”
#226The general demeanor of that person, some of the lingo used like "rooting" or "federal server hijacking", the fact that in the screenshot he's using some text editor with ads in it to browse the offending code combined with the fact that he doesn't know what Curl is (if he did he wouldn't have sent this e-mail) screams "script kiddie" to me. I'm not sure whether this person is actually responsible for a multi-million…
We are dealing with a person with mental illness, because nothing is coherent. It's all made up. That's why you don't answer that kind of mail, the goal is to trigger a reaction from you.
>We are dealing with a person with mental illness, because nothing is coherent. It's all made up
Seem like the average person to me :)
Re: “I will slaughter you”
#227Earlier quoted context omitted.
We are dealing with a person with mental illness, because nothing is coherent. It's all made up. That's why you don't answer that kind of mail, the goal is to trigger a reaction from you.
^--- This. Every word of it. Two words went through my head reading the response. "Crystal Meth". Likely not, really, but having more-or-less lost an old friend to meth I can't help but compare the similarities (... the "identicalities" actually): - the desperation and paranoia - a solid (but wildly misplaced) basis in reality - the overwhelming externalization of blame - the need to lash out and draw someone else in…
> - a solid (but wildly misplaced) basis in reality
can you explain this more ? I recognize some traits of these in me and siblings but we're not on meth at all.. so I find the psychological flaws interesting.
sorry about your friend too
Re: “I will slaughter you”
#228Earlier quoted context omitted.
^--- This. Every word of it. Two words went through my head reading the response. "Crystal Meth". Likely not, really, but having more-or-less lost an old friend to meth I can't help but compare the similarities (... the "identicalities" actually): - the desperation and paranoia - a solid (but wildly misplaced) basis in reality - the overwhelming externalization of blame - the need to lash out and draw someone else in…
> - a solid (but wildly misplaced) basis in reality can you explain this more ? I recognize some traits of these in me and siblings but we're not on meth at all.. so I find the psychological flaws interesting. sorry about your friend too
You bet, and thanks for your condolences. In short, almost certainly this doesn't apply to you.
The pattern is that in these scenarios, usually the people are quite intelligent and often accomplished. This gives them a repository of valid phrases and concepts to draw upon to breath legitimacy into their boogeymen. The evidence they present, however, is completely benign. That person, however, has quite the story they think is proven. It's literally as if they're showing you a basic electronic device w/ the cover removed and that proves all sorts of maliciousness.
Attempting to argue back is completely ineffective and even if you "win" one point, they'll quickly shift to another and nothing sticks, especially not the next time you talk to them.
I wouldn't even remotely compare this to more commonly contested topics like differing religious/political/social views, even at the extreme. This involves a visceral fear that >you< are actively being attacked, not some nefarious, shadow with a grand plan.
Re: “I will slaughter you”
#229Many comments rush to label this guy as "mentally ill". Being an entitled asshole with misdirected anger is not necessarily a medical condition. And there are plenty of people with actual mental health problems who are not aggressive at all (statistically, mentally ill people are more likely to be victims of violence). Health issues are a thing that happens to people, and they don't have control over it, which absolv…
I think people are saying that not just because of the aggression, but also because the story is all over the place and makes little sense.
Precisely. The list of attacks (?) described in the email is an assemblage of meaningless phrases (like "favicon XML injection" and "JS stochastic Templating") and unrelated occurrences ("Solarwinds Oct/2020").
Re: “I will slaughter you”
#230There are two things wrong here: The person saw some exploit with curl headers, which damaged their life. That's upsetting, even if the email is misdirected, because Daniel just provided the infrastructure, and did not cause the specific abuse. What is wrong is the threat to life. The second thing that is wrong is to respond to the second email by doxxing the author to the public. The second email showed that the thr…
Nobody is being doxxed here. "Al Nocai" is a pseudonym, and Daniel redacted the actual email address.
Must be the persons wordplay on Nicolai