7 ms·
95% of PHPixie Installs on Packagist Are Fraudulent
- kaendfinger 10y agoI wonder how much this happens in other communities. No doubt it happens with NPM.
- patates 10y ago> No doubt it happens with NPM. Could you please care to explain why?
- bcruddy 10y agoBecause NPM is the largest package ecosystem ever
- jessaustin 10y agoI'd have less doubt, if I were to see some examples...
- hinkley 10y agoThe Java community became familiar with the term 'astroturfing' after JBoss was caught doing it. Rot in hell, Marc Fleury
- stevekemp 10y agoCertainly the docker repositories are vulnerable to this. If you look at a users' profile page you can see the download-count for each image. The biggest download count becomes the most popular image, and you can script it trivially: docker pull skxskx/wordpress docker pull skxskx/wordpress .. docker pull skxskx/wordpress It's not something that I regard as a problem, but I did notice in passing and added 50 downloads to a few of my images on evening to test the concept.
- dreyfan 10y agoNot too surprising. PHPixie spams /r/php like crazy. Trying to ride the huge success that Laravel has experienced except they are skipping the steps of having a solid product or a strong community.
- kyriakos 10y agoI'm not surprised, the author been spamming reddit about his framework for years. He has a really bad reputation in /r/PHP. At the same time I've never seen any projects using this framework.
- jsmthrowaway 10y agoWell, I sure didn't have to go far into following this post's links to crash right into this boulder: Why are women and children evacuated first in case of disaster? So we can think about a solution in silence. #funny https://twitter.com/dracony_gimp/status/726165884260241408 https://twitter.com/dracony_gimp/status/726165884260241408 I don't know this person, but between the multiple reports of sockpuppeting in the post and, well, that, I'm not encouraged. (Edit: Hi Dan. Good to see you, as always. I'm out of my HN rabbit pellet comment quota and cannot reply to you, as you intend. Consider whether this turned into a nonviolent demonstration of something I feel that you should address and that perhaps it is not me that you should be chastising, or just ban me and get it overwith for calling out sexism both in the unrelated community and this one. Since your play here was to go after me for rather intentionally attacking a systemic problem here that this community somewhat unapologetically perpetuates and that you are lightly acknowledging, perhaps that tells me what I need to know about your opinion on this and how you plan to fix it over time. In which case a ban would be a relief and finally communicate to me after about seven years on different accounts that Y Combinator and Hacker News give absolutely zero fucks about exclusionary content, behavior, or people. My bad for not staying on topic about a completely irrelevant sockpuppeteer in the PHP community. I'll do better about the purity of staying on topic, because it's clearly driving a substantive conversation upthread. Perhaps we can discuss how this would be implemented in Arc, or would you change the rules mid-conversation? Happy to e-mail with you about this again until I start making too much sense and you don't reply.)
- jprince 10y agoYes, one way to end an argument you can't win is to go straight to character assassination. Kudos, well done sir.
- jsmthrowaway 10y agoThere's an argument? And I'm trying to win? I'm just disappointed to see casual sexism like that in the wild given how widespread it is in the industry, and it's not exactly getting me on his side. It was right there, like two tweets ago from following the post's backstory. It's not like I drudged up ancient history on this guy, and I certainly wasn't trying to look nor assassinate anybody.
- joshmn 10y agoI don't follow the PHP crowd but this is... I don't know. An ego play for this individual? I'm trying to figure out what he has to gain other than a pat on the back.
- JustSomeNobody 10y agoSome developers really do want to be rockstars, I suppose.
- Perihelion 10y agoHe's allegedly inflated his usage numbers in order to secure/sustain membership in the PHP-FIG. There are several high-profile projects in the group, so I imagine getting your project listed as a member adds some prestige and is good for resume building. PHP-FIG: http://www.php-fig.org/ http://www.php-fig.org/
- benologist 10y agoIF all his fun and games worked he could have owned a popular framework, sometimes that works out to be very valuable. Lots of people and companies have considered that enough justification to shill HN in the past.
- CiPHPerCoder 10y agoThe subsequent Reddit thread did not help PHPixie's credibility: https://www.reddit.com/r/PHP/comments/4iju97/95_of_phpixie_installs_on_packagist_are_fraudulent/ https://www.reddit.com/r/PHP/comments/4iju97/95_of_phpixie_i...
- kstrauser 10y agoPHPixie plus G-WAN seems like a perfect (sociological) match.
- vorg 10y agoThere's large-scale fraud by the Apache Groovy ecosystem also. Downloads from the Bintray repository mostly come as redirects from the groovy-lang.org website hosted somewhere in Germany, and the owner of that domain has a history of fabricating download numbers and gaming popularity rankings, so I suspect the "over 1 million downloads a month" claim is similarly fraudulent, though by what degree is anyone's guess.
- tauchunfall 10y agoThanks, this is interesting as a long-time Groovy user (who currently adapts Kotlin). I've found this [1]. [1] http://gavingroovygrover.tumblr.com/post/131337969066/groovys-apache-hoax http://gavingroovygrover.tumblr.com/post/131337969066/groovy...
- orf 10y agoUrgh, when did PHP become Java? https://github.com/PHPixie/ORM/blob/master/src/PHPixie/ORM/Builder.php#L152 https://github.com/PHPixie/ORM/blob/master/src/PHPixie/ORM/B...
- hinkley 10y agoWell, PHPixie is using a dirty trick right out of the JBoss playbook, so that's two strikes...