4 ms·
People are saying that this looks like React Native fork. Since the project hasn't acknowledged the forking, they already have given good reason to be suspicio
by DailyHN 7y ago
People are saying that this looks like React Native fork.
Since the project hasn't acknowledged the forking, they already have given good reason to be suspicious.
- StreamBright 7y agoDid you such a thing for React?
- asdkhadsj 7y agoDo you think that React Native was also a fork of something else?
- yorwba 7y agoDo you think that only forks of projects can have security issues?
- asdkhadsj 7y ago> Do you think that only forks of projects can have security issues? Huh? I'm replying to someone inquiring why someone else didn't review a fork. Aka, the GP was focused on the Fork aspect of Hippy, and the Parent asked about React, as if React was a fork. I think you misunderstood the comment chain. I was not even talking about security issues or how that affects forking. I was merely replying to another discussion about forking, and how React is viewed in that "forking light".
- yorwba 7y agoThe top-level comment in the chain is "Anyone done a security audit on this yet?" I was interpreting the forking discussion as an aspect of the security discussion.
- asdkhadsj 7y agoIt is - I guess I just mean, the reply I was specifically replying to seemed to be concerned on if OP cared about the forking of React. Vagueness and confusion all around, haha.
- athaca 7y agoThe Chinese government is evil. Of course we suspect something is going on with this sketchy looking fork.
- dmix 7y agoThey might be evil but I highly doubt they would be dumb enough to be putting backdoory security vulns directly in immature open source projects. That’s not how intelligence agencies work. They hire smart hackers who will hit it further down the pipeline where you would less expect it. But of course anything from a Chinese state connected company should be viewed skeptically. Let’s just be realistic about how that tends to work.