3 ms·

I dont know anything about this app besides your framing of "out-of-nowhere community builds an app" but am sometimes suspicious of nation states building these

by patcon 3mo ago

I dont know anything about this app besides your framing of "out-of-nowhere community builds an app" but am sometimes suspicious of nation states building these types of open source project forks. It's so easy now, and the cost seems incredibly low, to get into very intimate workflows (of very specific types of people). We've already seen attackers simulate whole communities for attacks on individuals, and I'm just wondering when we're going to see someone simulate a whole open source community in a longer play, as an kickstart on a longer term strategy of compromise

duxup 3mo ago
> sometimes suspicious of nation states building these types of open source project forks Is there an example of this? To what end?
- _factor 3mo ago
  To what end? I can think of 10 reasons immediately off the top of my head, but it’s far easier to fill existing open source projects with agent contributors for most of them. Do you really need someone to rhyme out why state actors do what they do?
  - duxup 3mo ago
    An example would be very interesting and yes explaining what they’re up to would be interesting as well. Otherwise it sounds like a made up conspiracy theory….
    - _factor 3mo ago
      Your accusatory ignorance is not mine to relieve. https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://en.wikipedia.org/wiki/XZ_Utils_backdoor
      - duxup 3mo ago
        That doesn’t seem to fit the scenario described earlier. You don’t have to explain anything… that’s your call. A claim with nothing to support it doesn’t change either.
        _factor 3mo ago
        You need to work on your reading comprehension. I am not the parent.
        duxup 3mo ago
        For someone worried about other people being “accusatory” you seem to be that way a lot.
    - patcon 3mo ago
      When something is only a few thousand dollars away from us in "the adjacent possible", I hardly think one needs to be a conspiracy theorist to suggest we consider it...? I don't have the means to research, but certainly there would be ample resources for such an attack in certain spaces??? Manufacturing social signal is hugely valuable
      - duxup 3mo ago
        I feel like governments have so many options for hacking that forking open source and dealing with all that is likely more work than whatever outcome they hope for.
darkwater 3mo ago
> We've already seen attackers simulate whole communities for attacks on individuals I think we saw the "opensource app go rogue for financial interests" and all of its related drama much more than state actors faking communities. So, Occam's razor applies here, IMO.

by patcon 3mo ago

duxup 3mo ago

> sometimes suspicious of nation states building these types of open source project forks Is there an example of this? To what end?

_factor 3mo ago
To what end? I can think of 10 reasons immediately off the top of my head, but it’s far easier to fill existing open source projects with agent contributors for most of them. Do you really need someone to rhyme out why state actors do what they do?
- duxup 3mo ago
  An example would be very interesting and yes explaining what they’re up to would be interesting as well. Otherwise it sounds like a made up conspiracy theory….
  - _factor 3mo ago
    Your accusatory ignorance is not mine to relieve. https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://en.wikipedia.org/wiki/XZ_Utils_backdoor
    - duxup 3mo ago
      That doesn’t seem to fit the scenario described earlier. You don’t have to explain anything… that’s your call. A claim with nothing to support it doesn’t change either.
      - _factor 3mo ago
        You need to work on your reading comprehension. I am not the parent.
        duxup 3mo ago
        For someone worried about other people being “accusatory” you seem to be that way a lot.
  - patcon 3mo ago
    When something is only a few thousand dollars away from us in "the adjacent possible", I hardly think one needs to be a conspiracy theorist to suggest we consider it...? I don't have the means to research, but certainly there would be ample resources for such an attack in certain spaces??? Manufacturing social signal is hugely valuable
    - duxup 3mo ago
      I feel like governments have so many options for hacking that forking open source and dealing with all that is likely more work than whatever outcome they hope for.

darkwater 3mo ago

> We've already seen attackers simulate whole communities for attacks on individuals I think we saw the "opensource app go rogue for financial interests" and all of its related drama much more than state actors faking communities. So, Occam's razor applies here, IMO.