News for hackers. Stuff that matters.

burninhell

Re:Shai-Hulud Returns: Over 300 NPM Packages Infected on Monday November 24, 2025 @12:05PM (#46036279)
I wish everyone here would read https://en.wikipedia.org/wiki/Capability-based_security and then realize that maybe, JUST MAYBE, THE PROGRAMMING LANGUAGES WE USE SHOULD NOT ALLOW IMPORTED PACKAGES TO ACCESS EVERYTHING AND THEIR LACK OF SECURITY GUARANTEES AND ACCESS RESTRICTION MECHANISMS MAKES THEM DANGEROUS