• 0 Posts
  • 13 Comments
Joined 8 months ago
cake
Cake day: February 15th, 2024

help-circle











  • Like a lot of markets big companies engage with, cloud services were operated at near loss levels for years. It’s only when they had a sufficiently vendor locked and invested user base that they started cranking the costs, especially in areas you wouldn’t otherwise notice. There’s a reason everything is micro billed, and it’s not to make it easier to lower costs on your end.


  • The backdoor was not contained within the source code, but within precompiled binary blobs sent “downstream” from the maintainer, this is often done so that end users get a leaner version of the software without development tool chains attached, which also makes automated checking of these blobs difficult to impossible so instead we rely on verified and trusted upstream maintainers to be “good actors”. That’s the reason this is such a big wakeup call, as it’s a maintainer that worked on projects and waited for years before trying to push this through.