American NGO using node-ipc lost 30k files detailing war crimes(snippet.host)
snippet.host
American NGO using node-ipc lost 30k files detailing war crimes
https://snippet.host/kvcb
15 comments
This is an obvious troll by the way. Given the username on GitHub of who raised this issue.
What's the contacts for this? Did something happen to some package called node-ipc?
Do you realize the irony of calling out a troll, while you yourself have presented no evidence?
because they're a new account? or for some other reason
was my first thought in seeing this.
r/linux thread for more context
https://www.reddit.com/r/linux/comments/tg9zk1/the_authors_o...
The developer was also hacked and doxxed today. Their twitter account was used to leak their own private information. https://news.ycombinator.com/item?id=30729422
https://www.reddit.com/r/linux/comments/tg9zk1/the_authors_o...
The developer was also hacked and doxxed today. Their twitter account was used to leak their own private information. https://news.ycombinator.com/item?id=30729422
From that reddit thread, here is the github issue from which the paste originated.
https://github.com/RIAEvangelist/peacenotwar/issues/45
Also, I haven't seen anything that suggests that this is fake. It seems to be a singular post without follow up by the poster. Maybe others have more information? (I've not seen anything that suggests that it's real either).
https://github.com/RIAEvangelist/peacenotwar/issues/45
Also, I haven't seen anything that suggests that this is fake. It seems to be a singular post without follow up by the poster. Maybe others have more information? (I've not seen anything that suggests that it's real either).
Does anyone know the best way to get in touch with NPM and/or GitHub moderation? Regardless of whether this unsourced statement is actually true in any way, what happened here is a trivial NPM ToS violation and the fact that it happened with such intent should be grounds for nuking the account. NPM does not allow any form of malicious code.
I’m all for the fact that I’m not owed anything at all from open source devs, but the open source community can’t survive unless we both adhere to and hold others to adhere to the base ground rule of not sneaking malware into packages. Plus, it’s probably against just about any ToS on the planet, and probably illegal.
I’m all for the fact that I’m not owed anything at all from open source devs, but the open source community can’t survive unless we both adhere to and hold others to adhere to the base ground rule of not sneaking malware into packages. Plus, it’s probably against just about any ToS on the planet, and probably illegal.
If they are NGO located in the US, nothing I assume prevents them from disclosing who they are. I mean, surely, do not disclose any details related to Belarus or Russia, but details like NGO name, if they are registered as non-profit - copy of the public info from the registration, contact person, etc. - could be provided? I mean, far it would be from my thought to distrust an anonymous message posted on anonymous board without any details whatsoever, but some people say "trust but verify"...
GUYS, THIS SNIPPET IS A FAKE. The story didn't happen. Either it‘s just somebody doing it for the lulz, or it's Russian disinfo.
Russian disinfo? You're joking, right? I don't know how to say this because I never thought I would need to, but the Russian government isn't shitposting in GitHub issues. It's almost certainly just some /g/ user trolling. It turns out there are sources of untrue things on the Internet other than massive shadowy Russian conspiracies to brainwash people. As far as I can tell, people have been telling lies on the Internet for a little while now.
Why do you think that? If Russia pays "troll farms" to shitpost on various social media websites for spread propaganda and forment doubt, why not GitHub as well? When react added a statement of support for Ukraine on their website, their GitHub repo was spammed to hell by mostly Chinese posters creating issues to complain. GitHub isn't some obscure thing nobody has ever heard of.
The message talks about the Russian army committing war crimes. I can imagine that if a Russian troll farm was behind this, they would invent some other story that didn't involve talking about Russian war crimes. Yes, they could be going out of their way to not sound like they are Russian, but this seems like a rather counterproductive way to do it from a Russian viewpoint.
1. destroy other people's computers because of their nationality. pure xenophobically motivated viciousness.
2. assume any mass retribution against ordinary Russians is unlikely to affect ordinary Ukrainians, and vice versa. As opposed to, you know, their close relationship over the years suggesting the exact opposite - they are not mutually exclusive categories, but rather, the chance of targeting one, makes it even more likely you also attack the other by mistake!
Time and time again war and blowback go hand in hand. Hopefully the dev is held accountable.
edit: turns out this is fake..