News for hackers. Stuff that matters.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by saalweachter on Friday March 29, 2024 @07:53PM (#39870331)
Assume 3% of the population is malicious.

Enough to be cautious, enough to think about how to catch bad actors, not so much as to close yourself off and become a paranoid hermit.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by pizzafeelsright on Friday March 29, 2024 @09:58PM (#39871140)
Huh. I never really thought of it as a percentage.

I've been evil, been wonderful, and indifferent at different stages in life.

I have known those who have done similar for money, fame, and boredom.

I think, given a backstory, incentive, opportunity, and resources it would be possible to most people to flip from wouldn't to enlisted.

Leverage has shown to be the biggest lever when it comes to compliance.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by XorNot on Friday March 29, 2024 @10:38PM (#39871348)
It's doubtful you've been evil, or at least, you are really lacking in imagination of the true scope of what that word implies.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by mlsu on Saturday March 30, 2024 @12:32AM (#39871853)
The line between good and evil cuts through the heart of every person
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by saulpw on Saturday March 30, 2024 @12:54AM (#39871935)
"Assume that 3% of the people you encounter will act maliciously."
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by heresie-dabord on Saturday March 30, 2024 @07:47AM (#39873942)
We live in a time of populous, wealthy dictatorships that have computer-science expertise are openly hostile to the US and Canada.

North America is only about 5% of the world's population. [1] (We can assume that malicious actors are in North America, too, but this helps to adjust our perspective.)

The percentage of maliciousness on the Internet is much higher.

[1] _ See continental subregions. https://en.wikipedia.org/wiki/List_of_continents_and_contine...

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by tomthehero on Saturday March 30, 2024 @08:27AM (#39874191)
If you put it in other words, US and Canada are openly hostile to the rest of the world.

Bullies who would have supported Hitler had he been named Netanyahu.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by heresie-dabord on Saturday March 30, 2024 @11:36AM (#39875845)
> If you put it in other words

You may of course choose whatever words you like. But your statement is nonsense, and the failures in the Middle East are all humanity's fault.

The kakistocracies of CN, RU, and IR are not the feeble foes of democracy and capitalism that they were in the 20th century.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by richrichie on Saturday March 30, 2024 @11:21AM (#39875683)
Huh? The empirical evidence we have - thanks to Snowden leaks - paints a different picture. NSA is the biggest malicious actor with nearly unlimited resources at hand. They even insert hardware backdoors and intercept shipment to do that.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by heresie-dabord on Saturday March 30, 2024 @05:03PM (#39878639)
> NSA is the biggest malicious actor

I'm curious, how do you rank CN, RU, and IR?

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by richrichie on Sunday March 31, 2024 @11:16AM (#39885013)
They are all active players, but no where close to the top dog.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by rieter on Monday April 01, 2024 @10:01PM (#39901607)
That doesn't mean that the entire population of those countries is actively hostile to you.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by account42 on Wednesday April 03, 2024 @08:19AM (#39916488)
The US government itself is openly hostile to the US (as well as to the rest of the world).

> The percentage of maliciousness on the Internet is much higher.

A baseless assumption.