Hacker News Reader

Was half expecting these people to be rogue actors trying to install some malware into prod.

Glad I was wrong!

It is really better if they are coworkers trying to install malware?

"Sufficiently advanced incompetence is indistinguishable from malware."

I remember an instance where someone updated and deployed the strong_passwords ruby gem since "it had an update". This was more or less right after it was found out that the v0.7 gem was compromised. Cue rushing at the commit and double checking that it was using the "fixed" 0.8 and not the 0.7. Developer had no idea that 0.7 was compromised, and just updated the gem because they could without looking at patch notes.

Is this yours? Sounds perfect.

Sounds even better (and more malicious) reversed: "Sufficiently advanced malware is indistinguishable from incompetence". All those debug features "mistakenly" shipped in hardware...

Sketchy .so acted like a denial of service.

That’s malware in my book.

It's accidental malware. That's better, if you're an ethicist, and no better at all, if you're the one having to clean up the mess.

It's also better if you're the company deciding whether you have to press espionage charges or not.

Reply on news.ycombinator.com