4 ms·

The "users are mean" story is something that we can all do something about, and, honestly, I prefer stories with morals that most of us can actually put into pr

• jrochkind1 3y ago
  Ah, well, I guess my thought is that we need to figure out what to do about the "take over from a burned out maintainer and then inject malware" attack. It's not obvious what to do about it to me either. Which is why I'm concerned to talk about it. That this attack was run by someone who had been participating in the project for possibly years before making the attack -- is not what i would have expected, and makes it even much harder to defend against. Before I was thinking it was about awareness of "don't just turn over the thing to someone new who just showed up, they might be an attacker." But not that easy in this case. I suppose "try to get users to be less mean, by doing our part by being less mean individually" is arguably one piece of strenghtening defenses to this kind of attack, I guess, ok.
  • transpute 3y ago
    > I suppose "try to get users to be less mean, by doing our part by being less mean individually" is arguably one piece of strenghtening defenses to this kind of attack, I guess, ok. Yes, by denying cover traffic.