Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Snyk security researcher deploys malicious NPM packages targeting cursor.com

sourcecodered.com

Post reply on HN
Print view View original

41–50 of 331 posts

Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com

#41

Post by lolinder »

KennyBlanken wrote: post #35
lolinder wrote: post #23

Earlier quoted context omitted.

IDF Unit 8200 consists of thousands of conscripts serving their mandatory military service. If I were in Israel subject to conscription, I would absolutely have attempted to position myself into that unit for my mandatory service, as would most here. Beats the infantry. What exactly am I confusing by pointing that out? Were you under the impression that this unit was something like the NSA, staffed with people who ch…

Those "kids who are very good with computers" designed a black-box AI that has been designating people terrorists which the military then uses to bomb not just them but their entire family. https://www.npr.org/2023/12/14/1218643254/israel-is-using-an...

And their peers in the other branches are killing civilians in other ways. Your point?

The only way to hold this against the individuals rationally, especially for those on this forum who would absolutely have chosen Unit 8200 as the least bad option given conscription, is to blame every citizen of the state of Israel and hold them all in distrust for having ever been in any branch of the IDF. I'm personally not okay with that level of sweeping blame and distrust. Are you?

Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com

#42

Post by [deleted] »

PessimalDecimal wrote: post #39
lolinder wrote: post #29

Earlier quoted context omitted.

The other alternative that those kids were given was to shoot guns or missiles. Are you really comfortable blaming them for the rest of their lives for choosing the option that likely gave them the smallest chance of killing people? Any Israeli citizen in that age bracket today is going to be running a real risk of killing people. They don't have a choice (dodging the draft doesn't count as a choice). If you're going…

> Are you really comfortable blaming them for the rest of their lives for choosing the option that likely gave them the smallest chance of killing people? Yes. The "just following orders" excuse has been tried in the past. People didn't buy it then and we won't buy it now. https://www.nbcnews.com/news/world/israel-soldiers-arrest-ab... If the IDF wants to name the specific individuals from Unit 8200 who were involved…

[deleted]

Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com

#43

Post by redserk »

3eb7988a1663 wrote: post #21

I need to get serious about doing all development inside a virtual machine. One project per VM. There are just too many insidious ways in which I can ignorantly slip up such that I compromise my security. My only solace is that I am a nobody without secrets or a fortune to steal. IDEs, plugins, development utilities, language libraries, OS packages, etc. So much code that I take on blind faith.

Vagrant’s popularity seems to have died down with Docker containers but it’s by far my favorite way to make dev environments.

Several years ago I worked somewhere that prohibited web browsers and development tools on laptops. If you needed to use a browser, you’d have to use one over Citrix. If you needed to code, you’d use a VDI or run the tools in a VM.

At the time I thought their approach was clinically insane, but I’m slowly starting to appreciate it.

Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com

#44

Post by KennyBlanken »

lolinder wrote: post #13
RHSeeger wrote: post #9

Earlier quoted context omitted.

They just recently snuck bombs into a supply chain and then remotely detonated them in positions where the caused civilian injuries. I would assume the comment has nothing to do with religion/race, and everything to do with the actions taken. Even for someone that is a supporter of that government, it's hard to deny they've taken some actions that are unsupportable.

Who is "they"? Are we talking about Snyk? IDF Unit 8200? The IDF as a whole? The state of Israel? Jews in general? The reason why OP's comment feels like a racist dog whistle is because it's an enormous and dangerous generalization that seems to encompass an entire country. Israel has mandatory military service—if everyone who's ever served in the IDF is untrustworthy because they served in the IDF then you're by def…

Godwin's got an itch he can't scratch and doesn't know why....

"Encompassing the entire country" would be anti-zionist, not antisemitic.

There is a huge difference, and that does not change because the majority of people in that country are a particular religion, just like it's not "Anti-Protestant" if someone attacks Great Britain policies, or "Anti-Hindu" if someone criticizes India.

There is a difference, to the extent that there are plenty of jews who are anti-zionist.

Would you like to accuse them of being antisemitic because "nearly every Israeli citizen is Jewish"?

Also, it's your construct that criticizing the policies and actions of a country's military and government is "anti" that county...

Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com

#45

Post by lolinder »

KennyBlanken wrote: post #44
lolinder wrote: post #13

Earlier quoted context omitted.

Who is "they"? Are we talking about Snyk? IDF Unit 8200? The IDF as a whole? The state of Israel? Jews in general? The reason why OP's comment feels like a racist dog whistle is because it's an enormous and dangerous generalization that seems to encompass an entire country. Israel has mandatory military service—if everyone who's ever served in the IDF is untrustworthy because they served in the IDF then you're by def…

Godwin's got an itch he can't scratch and doesn't know why.... "Encompassing the entire country" would be anti-zionist, not antisemitic. There is a huge difference, and that does not change because the majority of people in that country are a particular religion, just like it's not "Anti-Protestant" if someone attacks Great Britain policies, or "Anti-Hindu" if someone criticizes India. There is a difference, to the e…

> Also, it's your construct that criticizing the policies and actions of a country's military and government is "anti" that county...

No, it's not—we're in a subthread where the OP said "Just a reminder that Snyk was founded by ex-IDF Unit 8200 soldiers. I would not trust them given what we've seen Israel do to supply chains."

They took the country's current policy and made it personal against specific IDF vets. That's what I'm standing against.

For the rest, I specifically said that it may not be antisemitic given that it's country-specific, so I'm not sure what you were getting at. I'm still not okay with blanket blaming an entire country's citizenry for its government actions. I wasn't okay with that when it came to Russia and Ukraine, I don't know why I should treat this differently now.

Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com

#47

Post by KennyBlanken »

lolinder wrote: post #41
KennyBlanken wrote: post #35

Earlier quoted context omitted.

Those "kids who are very good with computers" designed a black-box AI that has been designating people terrorists which the military then uses to bomb not just them but their entire family. https://www.npr.org/2023/12/14/1218643254/israel-is-using-an...

And their peers in the other branches are killing civilians in other ways. Your point? The only way to hold this against the individuals rationally, especially for those on this forum who would absolutely have chosen Unit 8200 as the least bad option given conscription, is to blame every citizen of the state of Israel and hold them all in distrust for having ever been in any branch of the IDF. I'm personally not okay…

> is to blame every citizen of the state of Israel

nobody has said or even implied this

> hold them all in distrust for having ever been in any branch of the IDF

nobody has said or even implied this

> that level of sweeping blame and distrust

There has not been any such thing in this discussion.

We're done here.

Re: Snyk security researcher deploys malicious NPM packages targeting cursor.com

#48

Post by lolinder »

KennyBlanken wrote: post #47
lolinder wrote: post #41

Earlier quoted context omitted.

And their peers in the other branches are killing civilians in other ways. Your point? The only way to hold this against the individuals rationally, especially for those on this forum who would absolutely have chosen Unit 8200 as the least bad option given conscription, is to blame every citizen of the state of Israel and hold them all in distrust for having ever been in any branch of the IDF. I'm personally not okay…

> is to blame every citizen of the state of Israel nobody has said or even implied this > hold them all in distrust for having ever been in any branch of the IDF nobody has said or even implied this > that level of sweeping blame and distrust There has not been any such thing in this discussion. We're done here.

Yes, it was done by OP, the comment that was rightly flagged and then later resurrected:

> Just a reminder that Snyk was founded by ex-IDF Unit 8200 soldiers. I would not trust them given what we've seen Israel do to supply chains.

Given that Unit 8200 is staffed by conscripts, how is this anything other than attempting to ensure that any person who ever came of age in Israel has that held against them for the rest of their careers?

Members of Unit 8200 weren't given a choice between that and the private sector—they were given a choice between that and shooting a gun, which for a technically inclined new-adult isn't much of a choice at all. And am I seriously supposed to believe that OP would argue that choosing to be a grunt who shoots a gun at people would be the morally purer choice that would make someone more trustworthy?

Post reply on HN