News for hackers. Stuff that matters.

A comment on Popular Mac app 'Bartender' acquired by new unknown developer. Parent comment

Re:Popular Mac app 'Bartender' acquired by new unknown devel... by aaronyarborough on Wednesday June 05, 2024 @10:02AM (#40584907)
I think the point was that open-sourced apps aren't vulnerable to an attack vector like this, which is true. Of course, not everything can be open-sourced, but the poster's point still stands.
[ Parent | on HN ]
Re:Popular Mac app 'Bartender' acquired by new unknown devel... by Aurornis on Wednesday June 05, 2024 @10:53AM (#40585579)
Open sourced apps are absolutely vulnerable to this “attack vector”

Did you already forget about the back door in xz utils?

[ Parent | on HN ]
Re:Popular Mac app 'Bartender' acquired by new unknown devel... by Hamuko on Wednesday June 05, 2024 @10:15AM (#40585057)
Except that it's not really true, since open-sourced applications can and most definitely have changed maintainers. And even if they don't, there's still a risk. Do I need to remind everyone of the xz incident when it's so recent?
[ Parent | on HN ]