News for hackers. Stuff that matters.

A comment on U.S. to give ransomware hacks similar priority as terrorism, official says. Parent comment

Re:U.S. to give ransomware hacks similar priority as terrori... by mewpmewp2 on Thursday June 03, 2021 @11:14PM (#27390152)
Surely you mean lock files not package jsons?
[ Parent | on HN ]
Re:U.S. to give ransomware hacks similar priority as terrori... by motoxpro on Friday June 04, 2021 @01:56AM (#27391020)
Haha I would hope so. A 5-6 figure package.json would be insane!
[ Parent | on HN ]
Re:U.S. to give ransomware hacks similar priority as terrori... by hunter2_ on Friday June 04, 2021 @12:46AM (#27390667)
Oops, that's the big one. Maybe it's fine for that to be inhumanely large, as merely an artifact? Bad example then, but the point stands.
[ Parent | on HN ]
Re:U.S. to give ransomware hacks similar priority as terrori... by ehnto on Friday June 04, 2021 @07:33AM (#27392546)
Well the package.json only specifies the top level dependencies not all of the dependencies in the tree. So the .lock is probably a better representation of the actual dependency tree. It's not uncommon to include one library and get an extra 10, 20+ dependencies you don't even know about unless you care enough to check.
[ Parent | on HN ]