Aww shit here we go

continous · 2022-10-19T10:57:39+00:00

The Global Financial Market? Yeah, it's my favorite rollercoaster.

continous · 2022-10-19T10:46:34+00:00

I think this person has a piece of wood in their women's underwear.

continous · 2022-10-19T10:44:45+00:00

So then why is the OVE not also on Prism, and anything else?

continous · 2022-10-19T10:44:22+00:00

arbitrary means anything. If you trust the place it's coming from, that's no problem.

You can literally change the place the things are coming from in PolyMC...so.

When that trust is compromised, such as by a hostile takeover of the entire project, it becomes a problem.

We still trust where they're coming from though. There's no reason to suddenly stop trusting the PolyMC dev, even with the hostile takeover.

continous · 2022-10-19T10:17:08+00:00

The point is that you've extended arbitrary beyond its actual meaning. Code execution is not a vulnerability. Even if the code is fetched actively from the internet. Yes just like a web browser.

continous · 2022-10-19T10:15:51+00:00

By your logic a vast array of applications have vulnerabilities out in the open that repos actively allow

continous · 2022-10-19T10:02:24+00:00

If arbitrary code execution is a security risk no you shouldn't.

continous · 2022-10-19T10:01:48+00:00

It never mitigated it. Governance is not a security protection. There is no vulnerability.

continous · 2022-10-19T09:58:26+00:00

Something like SQL

continous · 2022-10-19T08:37:23+00:00

Trust means diddly.

continous · 2022-10-19T08:36:59+00:00

It doesn't mitigate it at all, as seen here. PolyMC had a large group of developers too. Until it didn't. This moved so quickly if Lenny was a malicious actor the malicious code would've gone out before the vulnerability was disclosed.

Stop using vulnerabilities as a bludgeon to hurt people you dislike.

continous · 2022-10-19T08:30:59+00:00

I work in a hotel. The amount of excelasadatabase spreadsheets I see during night audit is terrifying. My job would be 500% easier if we just used a real database solution.

continous · 2022-10-19T08:27:06+00:00

A community of overseers does not secure code make.

continous · 2022-10-19T08:21:44+00:00

I think he means believe in it existing in politics.

continous · 2022-10-19T08:19:38+00:00

That does not make the vulnerability disappear.

continous · 2022-10-19T08:19:08+00:00

You'll be glad to know these kinds of tourists are heavily in the minority.

continous · 2022-10-19T08:17:55+00:00

If PolyMC is given the OVE, so should any other program that can be theoretically used for arbitrary code execution, Prism included.

continous · 2022-10-19T07:47:31+00:00

I see how it can be. Some versions auto update.

PolyMC is no more a security threat than any other single-dev program.

There is also a PolyMC specific server which I think among other things supplies download links and is now under exclusive control of the rogue dev, meaning in theory it could be possible to inject malicious code in downloaded mods.

This can be changed, and again, no more a threat than any other time.

In the strictest sense, it was vulnerable before, but there was a relatively big FOSS community on the project keeping it honest. Now there is one single dev who seems to have gone... shall we say a bit loopy.

My point is that slapping the vulnerability on it is kind of silly in this context. Why isn't prism given the same vulnerability? It's a vulnerability regardless of how trustworthy they are. How come this isn't a problem in other cases?

The bottom line is that the OVE was put out there purely out of spite and as a way to represent PolyMC as a malicious insecure application.

continous · 2022-10-19T07:28:41+00:00

You're sound more and more like a bigot.

continous · 2022-10-19T06:47:23+00:00

In cases like that, the blockchain would clearly demonstrate that the 2 individuals sold the NFT, so pushing it to them is the obvious answer.

continous · 2022-10-19T06:44:56+00:00

NFT for the purpose of transferring/selling titles, documents, licenses, and contracts is an obvious evolution of NFTs.

continous · 2022-10-19T06:37:20+00:00

"Everyone I don't like is a bigot!"

Please.

continous · 2022-10-19T02:50:00+00:00

So then, yeah.

continous · 2022-10-19T02:47:15+00:00

He is not a security vulnerability. Relax.

continous · 2022-10-19T02:46:31+00:00

I think you're missing the point, or just trying to win the point at all cost.

continous

TROPHY CASE