Hacker News Reader

Comment by sbarre | Hacker News Reader

That's not my point at all.

If these apps eventually have millions of users, most of whom will just be downloading the binary releases and using auto-update to get the latest version through some opaque updater, what's to stop a future update from being nefarious?

View on HN

Adobe customers are asking that exact same question

Isn't that the risk of literally any software?

Yes, but there used to be a gatekeeping effect because the development of huge software packages like LibreOffice was too capital-intensive to be enticing for a criminal enterprise. If you have malicious intent and know your way around software, finding a security defect and exploiting it for the umpteenth ransomware campaign is much easier than building a full office suite from scratch and getting a userbase going in order to sneak malware in years down the line. The implied fear is that coding chatbots may make this attack economically viable.

Certainly but often there's a company or well-known entity behind popular software, so that brings some accountability to the table.

In this case, these ArtCraft apps are one person I think?

This is how software outside gatekept marketplaces always worked.

I would argue it happens even inside marketplaces. We've seen the authors of popular Chrome extensions take payouts and sell their extensions to new owners who have bad intentions for the userbase.

Reply on news.ycombinator.com