3 ms·
Have you been living under a rock for the past couple of years? Some have never learned anything from the original Red Scare, so now we're full into Red Scare 2
by 5e92cb50239222b 3y ago
Have you been living under a rock for the past couple of years? Some have never learned anything from the original Red Scare, so now we're full into Red Scare 2.0.
Reminds me of that HN comment I saw where some US company started a rewrite of their frontend when they discovered that the 100% FOSS UI components library they had been using was developed by a Chinese company. Cut off your nose to spite your face and all that.
Wait until they learn how much code of Chinese and Russian origin there is in the Linux kernel.
- guilamu 3y agoIsn't the linux Kernel open source?
- mschuster91 3y agoSupply chain attacks are a thing. Given that we are in an active war with Russia and a trade war with China (which is reasonably expectable to turn into an active war as well), it makes sense to drop everything out of your supply chain where the people with commit and release access are in the reach of these nations' secret services. Hardly anyone walls off their on-prem/on-cloud CI services, the amount of damage that a dedicated and actually skilled actor can do before being stopped is immense - we're lucky that most of the malware in the NPM ecosystem has been credential stealers (which were then used to mine cryptocoins) and cryptocoin miners, so relatively harmless in comparison to what an attacker might do in a war. Don't forget how Russia killed off a bunch of windmill remote management systems as they executed a hack on a sat-internet provider early in the Ukraine war. No one is safe from being collateral damage.