Live data from Hacker News

The rise of user-hostile software

den.dev

301–303 of 303 posts

Re: The rise of user-hostile software

#301
post #275

Earlier quoted context omitted.

Wait, what did Bitwarden do?

https://github.com/bitwarden/desktop/issues/552 Downloads and execs unexamined code released by the devs, potentially backdooring your whole machine solarwinds-style. It also divulges to MSFT (GitHub admins) all the IPs of Bitwarden users (even ones using a selfhosted API).

Isn't this true for any app that has updates though?

Re: The rise of user-hostile software

#302

Agreed on all points. Interesting to see this: > You can argue that all of this has existed for a very long time, back from the days of all kinds of toolbars and extensions that created multiple levels of address bar nesting in your web browser and taskbar. What I find ironic about the whole situation is, back then it was universally known that those toolbars and extensions are distributed by assholes. The whole soft…

> back then it was universally known that those toolbars and extensions are distributed by assholes. Clearly not the case or they wouldn't have been as ubiquitous as they were.

I was aware of the problem at the time but I couldn't even install AOL Instant Messenger without having some "weather toolbar" secretly installed too.

Re: The rise of user-hostile software

#303
post #275

Earlier quoted context omitted.

https://github.com/bitwarden/desktop/issues/552 Downloads and execs unexamined code released by the devs, potentially backdooring your whole machine solarwinds-style. It also divulges to MSFT (GitHub admins) all the IPs of Bitwarden users (even ones using a selfhosted API).

Isn't this true for any app that has updates though?

No-interaction autoupdates, yes.

This is how the solarwinds hack happened.

Post reply on HN