Hacker News: NarcissistDev

New comment by NarcissistDev in "Xzbot: Notes, honeypot, and exploit demo for the xz backdoor"

NarcissistDev — Wed, 03 Apr 2024 00:16:30 +0000

Thing is, sec should be taken seriously across the board. I love what OpenBSD devs did - they seen an entire community of naive coders who didn’t give much of a crap about security and started something. I have used OpenBSD for 10 years and thoroughly recommend it to anyone to give you a good slap around the face for how shit is done right.

New comment by NarcissistDev in "Xzbot: Notes, honeypot, and exploit demo for the xz backdoor"

NarcissistDev — Wed, 03 Apr 2024 00:09:42 +0000

I like your thinking. Absolutely. And very true. Even the folk who put the backdoor in will be getting paid. Everybody making bank, except Lasse.

New comment by NarcissistDev in "Timeline of the xz open source attack"

NarcissistDev — Tue, 02 Apr 2024 13:01:40 +0000

The same as what the ant colonies do when one of their own gets infected by the Ophiocordyceps unilateralis fungus.

New comment by NarcissistDev in "Timeline of the xz open source attack"

NarcissistDev — Tue, 02 Apr 2024 12:53:56 +0000

Thank the lord Lasse wasn’t maintaining the nuclear codes.

In another thought, I hope the nukes aren’t on a rolling Debian distro.

New comment by NarcissistDev in "Xzbot: Notes, honeypot, and exploit demo for the xz backdoor"

NarcissistDev — Tue, 02 Apr 2024 12:45:35 +0000

There’s a severe and dangerous lack of paranoia in this dev space.

If I was letting someone maintain my codebase, I would 1 Billion percent be reviewing everything… if there was a binary added, I’d be building it myself and comparing the checksums.

Trust absolutely no-one. If you can give a close friend or a loved one a loan of money and it is so easy for them to never pay you back, it should be a reminder that devs you’ve never met are even more likely to scam you.

New comment by NarcissistDev in "Xzbot: Notes, honeypot, and exploit demo for the xz backdoor"

NarcissistDev — Tue, 02 Apr 2024 12:39:09 +0000

They’d definitely have a great answer up their sleeves.

The crazy thing is the devs responsible for the XZ backdoor are among us and will likely be here on HN, downvoting comments which are getting close to the truth and upvoting each other.

The bad people are definitely here.