News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by brigandish on Tuesday January 11, 2022 @01:06AM (#29888151)
> are clean and clear legally because the victim chose to run their code

If you take a knife from my kitchen and use it on yourself that is not my fault.

If you ask me for a tissue and I provide you with a knife and tell you it's a tissue, then I have some responsibility.

Ultimately, in either case, why were you not more careful?

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by vertis on Tuesday January 11, 2022 @08:40AM (#29891312)
I mean to strain the analogy it's more like feeding someone a sandwich and then having the ability to transmute the sandwich into a knife once they've already eaten it.
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by brigandish on Tuesday January 11, 2022 @08:44AM (#29891350)
Did he meta-program that infinite loop? I haven't bothered to read the code… like everyone else :-D
[ Parent | on HN ]