[patcon]

I dont know anything about this app besides your framing of "out-of-nowhere community builds an app" but am sometimes suspicious of nation states building these types of open source project forks. It's so easy now, and the cost seems incredibly low, to get into very intimate workflows (of very specific types of people).

We've already seen attackers simulate whole communities for attacks on individuals, and I'm just wondering when we're going to see someone simulate a whole open source community in a longer play, as an kickstart on a longer term strategy of compromise

[darkwater]

> We've already seen attackers simulate whole communities for attacks on individuals

I think we saw the "opensource app go rogue for financial interests" and all of its related drama much more than state actors faking communities. So, Occam's razor applies here, IMO.

[duxup]

> sometimes suspicious of nation states building these types of open source project forks

Is there an example of this? To what end?

[_factor]

To what end? I can think of 10 reasons immediately off the top of my head, but it’s far easier to fill existing open source projects with agent contributors for most of them.

Do you really need someone to rhyme out why state actors do what they do?

[duxup]

An example would be very interesting and yes explaining what they’re up to would be interesting as well.

Otherwise it sounds like a made up conspiracy theory….

[_factor]

Your accusatory ignorance is not mine to relieve.

https://en.wikipedia.org/wiki/XZ_Utils_backdoor

[duxup]

That doesn’t seem to fit the scenario described earlier.

You don’t have to explain anything… that’s your call. A claim with nothing to support it doesn’t change either.

[_factor]

You need to work on your reading comprehension. I am not the parent.

[patcon]

When something is only a few thousand dollars away from us in "the adjacent possible", I hardly think one needs to be a conspiracy theorist to suggest we consider it...?

I don't have the means to research, but certainly there would be ample resources for such an attack in certain spaces??? Manufacturing social signal is hugely valuable

[duxup]

I feel like governments have so many options for hacking that forking open source and dealing with all that is likely more work than whatever outcome they hope for.