News for hackers. Stuff that matters.
Re:Snyk security researcher deploys malicious NPM packages t... by bbqfog on Monday January 13, 2025 @11:07PM (#42693488)
I have no downside to seeking alternatives. The pager incident ensured that I will always look for non-Israeli tech.
Re:Snyk security researcher deploys malicious NPM packages t... by dekelpilli on Tuesday January 14, 2025 @12:17AM (#42693951)
Based on the pager incident, I'd think you should avoid companies that don't have a publicly-known link to Israel. It's not like Hezbollah thought they were buying pagers from 8200 alumni.
Re:Snyk security researcher deploys malicious NPM packages t... by kstrauser on Monday January 13, 2025 @11:55PM (#42693816)
And what does that have to do with Snyk, other than that some of their employees use to work for IDF?

I'm a US Navy veteran. Would you also stay away from my employers because they have veterans on staff?

Seriously, I get what you're trying to say, but I don't understand the broader point you're trying to make. So Snyk has some ex-IDF employees. Find a high-profile infosec firm that doesn't. They military service they were compelled to has a reputation at being really, really good at infosec. I see no reason why companies shouldn't want to hire them afterward.

Re:Snyk security researcher deploys malicious NPM packages t... by defrost on Tuesday January 14, 2025 @12:08AM (#42693909)
Without wanting to take a position here, the GP comment had a specific narrow point.

The claim was that Snyk was founded by Unit 8200 members.

Not that it had a few Israeli veterens, almost all Israeli's serve in the IDF after all.

https://en.wikipedia.org/wiki/Unit_8200

To be fair I have a former Unit 8200 member in my larger extended family who left and has since been vocal in opposition to Netanyahu so membership in an elite Cyber Unit alone doesn't define a person.

That aside, most Governments would keep an eye on a company started by, say, former NSA employees and watch for covert activity under any overt actions.

Re:Snyk security researcher deploys malicious NPM packages t... by dekelpilli on Tuesday January 14, 2025 @07:05AM (#42696261)
It would correlate strongly that 8200 alumni end up being educated and working in tech, and likely living in Tel Aviv. This is a group of people who, by and large, are not big fans of the current government.
Re:Snyk security researcher deploys malicious NPM packages t... by PoppinFreshDo on Monday January 13, 2025 @11:33PM (#42693668)
What pager incident?
Re:Snyk security researcher deploys malicious NPM packages t... by mhitza on Monday January 13, 2025 @11:45PM (#42693763)
Re:Snyk security researcher deploys malicious NPM packages t... by PoppinFreshDo on Tuesday January 14, 2025 @03:41AM (#42695088)
Well, if the mossad put "made in israel" on those devices I doubt they would have worked.
Re:Snyk security researcher deploys malicious NPM packages t... by defrost on Monday January 13, 2025 @11:44PM (#42693747)
The recent one in which Israeli techs compromised pager supply chains.

It was very widely reported across the globe.