News for hackers. Stuff that matters.

A comment on Former Ubiquiti employee charged with stealing data and extorting company. Parent comment

Re:Former Ubiquiti employee charged with stealing data and e... by kabes on Thursday December 02, 2021 @02:26AM (#29413463)
Are node apps getting way more hacked than say php or java servers? Was his code any better?
[ Parent | on HN ]
Re:Former Ubiquiti employee charged with stealing data and e... by Thorrez on Thursday December 02, 2021 @03:31AM (#29413791)
There are frequently posts on HN about NPM packages getting compromised.

Of the top 10 posts on HN about NPM in the past 30 days[1], 9 are about security problems, and last 1 is about package spam.

[1] https://hn.algolia.com/?dateRange=pastMonth&page=0&prefix=fa...

[ Parent | on HN ]
Re:Former Ubiquiti employee charged with stealing data and e... by danielheath on Thursday December 02, 2021 @05:57AM (#29414659)
Node apps tend to depend on a far, far wider pool of maintainers.

To illustrate: A new Ruby on Rails app has 1/10th the number of maintainers in its dependency list than a new create-react-app codebase.

[ Parent | on HN ]
Re:Former Ubiquiti employee charged with stealing data and e... by dragonwriter on Thursday December 02, 2021 @06:07AM (#29414716)
A create-react-app app is not a node app (It has a node dev server, but it's a front-end JS app), so its a weird thing to reach for to illustrate a point about node apps.
[ Parent | on HN ]