Live data from Hacker News

NPM package compromised by author: erases files on RU / BY computers on install

snyk.io

131–140 of 188 posts

Re: NPM package compromised by author: erases files on RU / BY computers on install

#132
post #129
post #108

Earlier quoted context omitted.

This is the sad thing about all of this. Many people are demonizing average Russian citizens for the actions of their government. When the US invaded Iraq in 2003, I was very much against it, but felt powerless to change the course of my government. (And the US government kept on doing what it felt like, no matter how unjust its actions.) While I was ashamed of my country's actions, I didn't think it would be fair fo…

Majority of average Russian citizens support their goverment actions against Ukraine. So in my book, they are also responsible.

> Majority of average Russian citizens support their goverment actions against Ukraine

They do. Now, will installing malware on their computers make them change their mind and support Ukraine instead?

Re: NPM package compromised by author: erases files on RU / BY computers on install

#133
post #126

Earlier quoted context omitted.

The average russian citizen supports the war

Maybe, but you can't prove that with polls. It's illegal to oppose the war in Russia. The polls everyone is citing were conducted by state TV. Presuming they didn't just make up their data, imagine you got a call from state TV asking "if you support the special military operation to denazify Ukraine". Your friend just told you they know someone who knows someone who was arrested and charged with oppositing the war fo…

It's quite ironic how medias use Russian polls when it sticks to their narrative, and bashes them when it doesn't (i.e. Crimean referendum). We should take them all with the same level of skepticism.

Re: NPM package compromised by author: erases files on RU / BY computers on install

#134
post #133

Earlier quoted context omitted.

Maybe, but you can't prove that with polls. It's illegal to oppose the war in Russia. The polls everyone is citing were conducted by state TV. Presuming they didn't just make up their data, imagine you got a call from state TV asking "if you support the special military operation to denazify Ukraine". Your friend just told you they know someone who knows someone who was arrested and charged with oppositing the war fo…

It's quite ironic how medias use Russian polls when it sticks to their narrative, and bashes them when it doesn't (i.e. Crimean referendum). We should take them all with the same level of skepticism.

It's a broader pattern where they pattern match words without understanding. Like assuming Patriarch Kirill is some kind of fatherly pope-like figure just because of the title and distinguished beard, when in reality he's an ex-kgb agent who made his fortune as a cigarette smuggling gangster.

I don't think it's about "the narrative" though. I've generally seen these polls used by people who self-identity as against the narrative. These polls are usually posted in the comments section to rebut articles arguing (correctly) not all Russians support the war.

Re: NPM package compromised by author: erases files on RU / BY computers on install

#135
post #78
post #73

Earlier quoted context omitted.

Quoted post unavailable.

You do understand you are talking about real people? Young girls, parents of toddlers, grandmas? Why do you think _you_ have the right to tell them to go face possible death and torture?

They did choose to overwhelming vote and support for politicians that are now murdering real people including “ Young girls, parents of toddlers, grandmas”…

Re: NPM package compromised by author: erases files on RU / BY computers on install

#136
post #129
post #108

Earlier quoted context omitted.

This is the sad thing about all of this. Many people are demonizing average Russian citizens for the actions of their government. When the US invaded Iraq in 2003, I was very much against it, but felt powerless to change the course of my government. (And the US government kept on doing what it felt like, no matter how unjust its actions.) While I was ashamed of my country's actions, I didn't think it would be fair fo…

Majority of average Russian citizens support their goverment actions against Ukraine. So in my book, they are also responsible.

It may be the case but no one knows for sure. There is no independent sociology in Russia and the state controlled one is a gear in propaganda machine. Also many Russians are afraid to speak what they think and when asked just repeat what they heard on TV even if they don't agree.

Re: NPM package compromised by author: erases files on RU / BY computers on install

#137
post #129
post #108

Earlier quoted context omitted.

This is the sad thing about all of this. Many people are demonizing average Russian citizens for the actions of their government. When the US invaded Iraq in 2003, I was very much against it, but felt powerless to change the course of my government. (And the US government kept on doing what it felt like, no matter how unjust its actions.) While I was ashamed of my country's actions, I didn't think it would be fair fo…

Majority of average Russian citizens support their goverment actions against Ukraine. So in my book, they are also responsible.

This sort of logic justifies terrorist's killing of civilians like 9/11. If they can quote your book, the US citizens voted the governments in that oppressed and bombed members of their religion.

Re: NPM package compromised by author: erases files on RU / BY computers on install

#138

Earlier quoted context omitted.

Little text to say that you support the malicious actions and hope that nothing is done.

That is not the position ctvo is making at all. He never said he was in support of malware. He is stating that there should be no legal ramifications. The person who added the malware is definitely a piece of shit but i also agree he should not face legal ramifications. This is his code and he is allowed to do with it whatever he wants. It is the consumer to safe guard against external code. Legal ramifications would…

I too would normally agree if the software wasn't actually malicious this time. It is one thing to create an infinite loop in a package that can simply be terminated, but a whole other can of worms to actually start removing users files. I generally agree with what you are saying that open source developers don't owe anyone anything, but there is a line, otherwise think about the precedent it sets when open source dies out because businesses and government stop using open source because of hostile takeovers by other nations who then use popular open source projects to spread malware. People cheering this would be devastated if this happened to them, but by cheering that is what they are advocating for.

Nothing is black and white, I think there should be some flexibility because afterall it is open source, however intentionally deleting user files or installing spyware is where I draw the line. If you want to break your own software, then fine, but don't go breaking other peoples software intentionally and deleting files when that is not what your software was designed to do and you've gave no warning or indication to other users that you plan to change it.

Re: NPM package compromised by author: erases files on RU / BY computers on install

#139
post #78

Earlier quoted context omitted.

You do understand you are talking about real people? Young girls, parents of toddlers, grandmas? Why do you think _you_ have the right to tell them to go face possible death and torture?

They did choose to overwhelming vote and support for politicians that are now murdering real people including “ Young girls, parents of toddlers, grandmas”…

Free and fair elections? With candidates who haven't been jailed under trumped up charges, or "fell out" of windows? Free media that informed the electorate?

Re: NPM package compromised by author: erases files on RU / BY computers on install

#140
post #129

Earlier quoted context omitted.

Majority of average Russian citizens support their goverment actions against Ukraine. So in my book, they are also responsible.

This sort of logic justifies terrorist's killing of civilians like 9/11. If they can quote your book, the US citizens voted the governments in that oppressed and bombed members of their religion.

kbart doesn't defend the malware creator. He only made a counterargument to the statement that Russians aren't responsible for their government.
Post reply on HN