• 0 Posts
  • 103 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle


















  • TRMM was originally a personal project, at the beginning of which it makes some sense to intermingle things on the “official” site. I know I’ve done similar, but my projects never take off to the point that people are doing an audit. And I know I would absolutely make that exact exe for personal use.

    Keep in mind, the only reason the version with a crypto miner was found was because someone went digging around. No one was ever linked to the installer, no one had ever downloaded it by mistake, no one had ever had it stealthily installed without consent.

    I get that it’s a scary concept, like when brave was found to be injecting affiliate links into normal traffic. But in this case it wasn’t even something put in prod. It was found by accident, in a place that wasn’t doing any harm, and was never found in the wild.

    Seems like a lot to get worked up over.

    As for the discord chat, I’m not surprised. Having been in their discord for about as long as that “scandal” has been around: The reason his responses were fumbling? He’s just a hobbyist that’s managed to get one of his projects into a good enough place to make money off of. Are you expecting a PR team level of response?