Re:WordPress themes, plugins backdoored in supply chain attack
by john-doe on Sunday January 23, 2022 @08:30AM
(#30045999)
If the lines are somewhat blurred, you can understand my initial confusion, not being “in the WP ecosystem” myself.
Re:WordPress themes, plugins backdoored in supply chain attack
by monkey_monkey on Sunday January 23, 2022 @11:41AM
(#30047584)
Sure. but perhaps think about the use of emotive words like "deceitful" when you don't fully understand what's going on?
Re:WordPress themes, plugins backdoored in supply chain attack
by john-doe on Sunday January 23, 2022 @04:59PM
(#30050925)
English as third language, so let’s say I didn’t realise it was such a strong word.
Re:WordPress themes, plugins backdoored in supply chain attack
by Kye on Sunday January 23, 2022 @05:02PM
(#30050954)
English is a mess.
Deceitful implies intention. Qualifiers help. "Unintentionally misleading" fits better. It's like the difference between manslaughter (whoopsiedeath) and murder (intentional).
Re:WordPress themes, plugins backdoored in supply chain attack
by kjs3 on Sunday January 23, 2022 @05:41PM
(#30051299)
You have to understand that this sort of intentional obfuscation of ownership and responsibility under a single root of ownership is in most areas of business a pretty good indication of ill intent (even if it is depressingly common).
Jetpack is part of Automattic. Automattic's main thing is wordpress.com (the hosted platform). Automattic and WP.org are not the same thing even though ( as with many open source projects that have commercial implications) the lines are somewhat blurred.
Presenting this as "deceitful" is really quite the over-reaction.