Hacker News new | ask | show | jobs
by mafriese 103 days ago
I’m not saying that this is related to Wikipedia ditching archive.is but timing in combination with Russian messages is at least…weird.
2 comments

The script was uploaded in 2024, and triggered today because of an accident

https://en.wikipedia.org/wiki/Wikipedia:Village_stocks#Scott...

And they probably used mind-control to make the admin run random userscripts on his privileged account as well, the capabilities of russian hackers is scary.

/s

It is just another human acting human again.

Admin tasks are public in phabricator so it would be trivial to review chores and place malware in the chore's scope
Which only makes it that much more important to review everything you're running with a privileged account, right?

And if it really is as trivial as you say it should be fixed ASAP.

I mean it's trivial for any attacker to discover admin tasks and know where to place malicious code for the admin tasks to execute it.