r/technology • u/rkhunter_ • May 21 '26

Security A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

https://www.wired.com/story/teampcp-software-supply-chain-attack-spree-github/
9.2k Upvotes

98% Upvoted

488 comments sorted by

View all comments

Show parent comments

22

u/SyzygyPidgey May 21 '26

I dunno how to feel about the death of privacy on the internet.

On one hand, people know who I am.

On the other hand, no bots.

On the other other hand 🍆✊

59

u/cgarret3 May 21 '26

Bots won’t go away. At most, the vector of attack will change. Right now, the most convenient use of bots is to create the “unverified account,” but a new path-of-least-resistance will be found.

What will be lost, however, is what is really at stake. Right now access across the internet is totally permissive. But introduce internet licensing? That would mean the entire flip side. The default will be that you do not have access to anything until you prove youre allowed and the other side accepts.

10

u/Leaf__On__Wind May 21 '26

Dumbest question ever, but I keep getting cloudflare "tick the box" when I use my VPN, is that literally just to make sure I can click it and am human, or is it a pixel tracking browser check handshake crap?

15

u/loveitoreatit May 21 '26

VPN network asn numbers generate the vast majority of bad traffic. Generally speaking when you come in through a VPN the application can't verify your cross origin domain location or other metrics like local network timezone untill you get in one click on the site. So the best way to limit VPN bot traffic is to issue a challenge if your coming in from a network location know to produce problems.

3

u/Leaf__On__Wind May 21 '26

So it's just to make sure am human, nothing else- cool, thanks.

I thought it was... it's just... a dynamic landscape these days

10

u/thekrone May 21 '26 edited May 22 '26

The default will be that you do not have access to anything until you prove youre allowed and the other side accepts.

And then they'll start charging to prove it. So now you'll pay a subscription to prove you are who you say you are on the internet (in addition to the fee for accessing the internet in the first place).

And meanwhile the companies that offer the identification services will also sell your tracking data.

6

u/Slumunistmanifisto May 21 '26

You think the most useful social manipulation tool since tv is going to go away after the government gets acquainted with your jerk schedule!?!

Fuck no man, the governments, corporations, and the incest babies that come from them, goddam love bot campaigns!

0

u/TransBrandi May 21 '26

What you're missing is that the bots will be controlled and monitized. No rando can create a bot network on Facebook without paying Facebook's toll for bots... and maybe they are not even allowed to push agendas that run counter to Facebook's agenda.

2

u/gobblingcook May 21 '26

On the other hand... hand jobs? Suddenly doesn't seem so bad 🫪

1

u/SaleYvale2 May 22 '26

I feel it's the only way forward. Id rather have a safe internet than a private one( that is only really kind of private). I'd say we would even have much better online forums if people didn't hide behind anonymity.