6 ms·

Regardless of your political position, this falls well within the definition of malware. It's irresponsible for the maintainer to allow this: https://github.com

Regardless of your political position, this falls well within the definition of malware. It's irresponsible for the maintainer to allow this: https://github.com/RIAEvangelist/node-ipc/issues/233 https://github.com/RIAEvangelist/node-ipc/issues/233

paxys 5y ago
Yup. Although if you do want to get political, I'd say this falls under the definition of cyber warfare. Also the maintainer didn't only "allow" it, it seems he is the author of the malicious module as well.
- quinnjh 5y ago
  Whats painful is that in terms of cyberwarfare, allied systems maintain dominance of global grid with innovation and open source. If we had allies in russia, im sure we have fewer now. This sort of DOS attack is effective in first order effects but the second order effects could be increased resentment and new systems developed in isolation.
zozbot234 5y ago
Plenty of existing ransomwares delete user files on everything-but-RU machines. Perhaps the maintainer of this package subscribes to the old view that "turnabout is fair play".
- schoen 5y ago
  "Some people in my country were victimized by organized crime in another country, so it's turnabout, and hence fair play, for me to victimize other people in that country"? "Some people in my country were victimized by organized crime in another country, and that country's government didn't try to stop the criminal activity, so it's turnabout, and hence fair play, for me to victimize other people in that country"?
  - madaxe_again 5y ago
- sva_ 5y ago
  But that shouldn't be an excuse to sink to their level.
  - labster 5y ago
    They haven’t really sunk to their level unless there’s an npm module to bomb hospitals I don’t know about. Still bad to target civilians, though.
    - sva_ 5y ago
      Well I meant the level of ransomware authors and the like.
- Jimbonius 5y ago
  But whatabout the other guys???? Are you a child?
  - zozbot234 5y ago
    Good question, you should ask the maintainer that. I'm speculating about their possible motive for abusing the FLOSS ecosystem in such a destructive way, not trying to justify their behavior or anything.
- bigcat123 5y ago
- YATA0 5y ago
  - lal 5y ago
    You know, if you really want to post like you're on /g/ you can just go back to /g/. It's still there.
    - YATA0 5y ago
      - lal 5y ago
        I'm just saying you'd be happier there, it even has boards for non-tech-related stuff since you don't post here about tech-related stuff. Perfect fit!
        YATA0 5y ago
        >I'm just saying you'd be happier there You'd be happier on /r/cuckold, yet here you are. >it even has boards for non-tech-related stuff since you don't post here about tech-related stuff. I posted on a thread about malware, and made a comment about malware. That's "tech-related stuff". You have poor reading comprehension. >Perfect fit! Reddit also has /r/soyboy as well! Perfect fit!
- foverzar 5y ago
  > delete user files on everything-but-RU machines Wasn't that about Cyrillic keyboard layout? Russia don't own neither Cyrillics, nor Russian language.
deleted 5y ago
[deleted]
urthor 5y ago
This still goes to the heart of the obligations of maintainers. "THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE." People keep placing obligations on maintainers in the FOSS ecosystem. Maintainers don't have to do jank in this situation, except don't fraudulently distribute their software. If they want to publish their upstream as malware, okay. It's the end user's fault for continuing to pull that source code and integrate it into their system.
- bryanrasmussen 5y ago
  >If they want to publish their upstream as malware, okay. I think you'll find that argument will not be very persuasive to a judge if the case is that the author of the software knowingly adds code in after people have integrated it into their systems that on purpose damages those systems. Intention will often carry weight, and no claiming of rights and purity and see I wrote here you can't do anything to me! is going to persuade a judge that you can just go around destroying property because you want to.
  - isitmadeofglass 5y ago
    If you sign a contract stating that you get 10k and in return I get to destroy your property. A judge is not very likely to enforce the payment but state that I should not destroy your property “because obviously thats not something you would like” The license grants you usage but you agree to no responsibility for damages. You can’t cherry pick half of it, that defies the entire point of a license. The fact that you’d like to both Ear your cake and have it to does not have any weight in court.
    - rcxdude 5y ago
      Licenses aren't contracts, and more to the point, licenses grant you the right to copy or distribute the software, you do not need to agree to them for use (this is a very common misconception). You have the right to use the software if you have been given a copy by someone with the right to distribute the software, unless you have signed a contract with them stating otherwise (EULAs and other such attempts to force a one-sided contract onto users generally have little weight in court).

paxys 5y ago

Yup. Although if you do want to get political, I'd say this falls under the definition of cyber warfare. Also the maintainer didn't only "allow" it, it seems he is the author of the malicious module as well.

quinnjh 5y ago
Whats painful is that in terms of cyberwarfare, allied systems maintain dominance of global grid with innovation and open source. If we had allies in russia, im sure we have fewer now. This sort of DOS attack is effective in first order effects but the second order effects could be increased resentment and new systems developed in isolation.

zozbot234 5y ago

Plenty of existing ransomwares delete user files on everything-but-RU machines. Perhaps the maintainer of this package subscribes to the old view that "turnabout is fair play".

schoen 5y ago
"Some people in my country were victimized by organized crime in another country, so it's turnabout, and hence fair play, for me to victimize other people in that country"? "Some people in my country were victimized by organized crime in another country, and that country's government didn't try to stop the criminal activity, so it's turnabout, and hence fair play, for me to victimize other people in that country"?
- madaxe_again 5y ago
sva_ 5y ago
But that shouldn't be an excuse to sink to their level.
- labster 5y ago
  They haven’t really sunk to their level unless there’s an npm module to bomb hospitals I don’t know about. Still bad to target civilians, though.
  - sva_ 5y ago
    Well I meant the level of ransomware authors and the like.
Jimbonius 5y ago
But whatabout the other guys???? Are you a child?
- zozbot234 5y ago
  Good question, you should ask the maintainer that. I'm speculating about their possible motive for abusing the FLOSS ecosystem in such a destructive way, not trying to justify their behavior or anything.
bigcat123 5y ago
YATA0 5y ago
- lal 5y ago
  You know, if you really want to post like you're on /g/ you can just go back to /g/. It's still there.
  - YATA0 5y ago
    - lal 5y ago
      I'm just saying you'd be happier there, it even has boards for non-tech-related stuff since you don't post here about tech-related stuff. Perfect fit!
      - YATA0 5y ago
        >I'm just saying you'd be happier there You'd be happier on /r/cuckold, yet here you are. >it even has boards for non-tech-related stuff since you don't post here about tech-related stuff. I posted on a thread about malware, and made a comment about malware. That's "tech-related stuff". You have poor reading comprehension. >Perfect fit! Reddit also has /r/soyboy as well! Perfect fit!
foverzar 5y ago
> delete user files on everything-but-RU machines Wasn't that about Cyrillic keyboard layout? Russia don't own neither Cyrillics, nor Russian language.

deleted 5y ago

[deleted]

urthor 5y ago

This still goes to the heart of the obligations of maintainers. "THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE." People keep placing obligations on maintainers in the FOSS ecosystem. Maintainers don't have to do jank in this situation, except don't fraudulently distribute their software. If they want to publish their upstream as malware, okay. It's the end user's fault for continuing to pull that source code and integrate it into their system.

bryanrasmussen 5y ago
>If they want to publish their upstream as malware, okay. I think you'll find that argument will not be very persuasive to a judge if the case is that the author of the software knowingly adds code in after people have integrated it into their systems that on purpose damages those systems. Intention will often carry weight, and no claiming of rights and purity and see I wrote here you can't do anything to me! is going to persuade a judge that you can just go around destroying property because you want to.
- isitmadeofglass 5y ago
  If you sign a contract stating that you get 10k and in return I get to destroy your property. A judge is not very likely to enforce the payment but state that I should not destroy your property “because obviously thats not something you would like” The license grants you usage but you agree to no responsibility for damages. You can’t cherry pick half of it, that defies the entire point of a license. The fact that you’d like to both Ear your cake and have it to does not have any weight in court.
  - rcxdude 5y ago
    Licenses aren't contracts, and more to the point, licenses grant you the right to copy or distribute the software, you do not need to agree to them for use (this is a very common misconception). You have the right to use the software if you have been given a copy by someone with the right to distribute the software, unless you have signed a contract with them stating otherwise (EULAs and other such attempts to force a one-sided contract onto users generally have little weight in court).