Post #1398867

2026-03-23 21:18 UTC

@chansecodina That would require having people outside the project paying attention to the sock puppet campaign, which was clearly not the case. You can't show that the sock puppets are related with cryptography. I agree that you can't solve social problems with technical tools. But that's kind of @coderanger 's point as I understand it. There has been absolutely nothing proposed that would have stopped JiaTan.

Replies (1)

@coderanger@cloudisland.nz 2026-03-23 21:32

@malwareminigun @chansecodina It would help a little, it would have created a new roadblock to this kind of attack. But in the end all that roadblock does is force an attacker to spend extra time finding a weak point somewhere in the strong-set, one person who is indirectly trusted but does a bad job vetting new friends. Maybe that adds a year to the timeline but we have 100% proof that these attackers are extremely patient so I don't feel much better overall. And of course the next time this happens, a human won't have been doing anything for that year, it will be some horrible LLM conglomeration spinning a loop with minimal oversight.

Open ##1398870