He took a job interview on his work machine from a fake company that was actually the NK hacking group and was convinced to download the payload.
Beyond stupid to take an interview from your current employers machine.
I wonder if Binance has a similar work culture to FTX
There were never hacks before as we all know.
Poor headline.
It began in June when an employee on Binance’s wallet developer team thought they’d indulge in some vibe coding by installing a popular AI coding tool. But they ended up downloading a tampered installation of Homebrew, a tool that’s popular with software engineers, after clicking a malicious ad.
There’s lots of packages on Homebrew and it’s a popular package manager, even outside of MacOS. He could have decided to grab anything from Homebrew and get hit.
The real one to blame here is Google for doing zero vetting on the crap they put at the top of the search results. Malicious ads for popular software happen constantly and so far they haven’t moved an inch to fix it.
But who downloads homebrew from the web and not CLI?
Vibe coders
Thats precisely my point, yeah. Or some PM who thinks they’re a Dev now
Thats something I would absolutely do years ago before I got more familiar with cli and not as afraid of a terminal shell
Are you a Dev though?
If you are developing software with financial impact, and every developer downloads their dependencies from the internet without further checks, you already have set up yourself for desaster.
If you would ask a LLM for how to guard yourself against malicious dependencies, this would be one of the first things they’d point out.
If you don’t know enough to write the code yourself, you likely also don’t know enough to ask the right questions
Also crazy how they are just allowed to “indulge” themselves with vibecoding on a machine that can access live production servers.
I’ve noticed Futurism has a ton of clickbait headlines.
I should really switch to Piefed so I can block it as a source…
futurism .com links often seem like clickbait for people who are skeptical of the broligarchy.
- It Turns Out Binance’s $6 Billion Hack Happened Because Its Employees Were Vibe Coding
- Anthropic’s IPO Is Cratering
- Kids Hooked on AI Chatbots Are Showing Dramatically Worse Mental Health: They’re turning to AI chatbots for help, but their machine confidantes are doing more harm than good.
- Former Meta Exec Shreds the Company’s Muse AI Agent as “Insane” Privacy Risk
I’m all for covering that side of the story - we need a lot more resistance against the oligarchy. But clickbait is sleazy no matter what story it’s pretending it can tell.
Sleazy propaganda is sleazy propaganda even if it’s in my favor.
Yeah, Futurism’s presentation is always overly dramatic and clickbaity. I end up learning more by clicking on the embedded links in the articles than the articles themselves.
And that’s why it’s always best to post the original source, not a repost with a warped headline.
TBH, if this gets worse, I’d like for /c/technology to enforce that as a rule.
Bold of you to blame google, a malware company, for advertising malware.
Google purposely malware advertise. They know these sites are malware.
It happened bc people hacked them. No hacking, no hacks. Hackety hack hack, stop it!
How is it that wallet developers had access to customers crypto? This seems like bad security and a breach of trust.
Getting socially engineered with AI slop and then downloading some random shit on your work machine is just humongously stupid. I wouldn’t want to be in the skin of that engineer right now
Dude should never be allowed to touch a computer again. How do these people get hired? He Googled “homebrew,” clicked a fucking ad, landed at the page in the screenshot, then ran that insanely obviously suspicious terminal command to “install” it. Are you joking.
This is partly on software devs these past 10-15 years. They’ve gotten so much lazier when it comes to making their software easy to install. Legitimate software often ends up having a 10-long list of instructions to install it.
I agree with you, but unfortunately “just run this command” is how the brew page works, so mac users are trained to just do that, and I can believe they did it without looking (although that command would have me asking questions as well) -
What the fuck? I did that when i was like 13. If someone wrote this as a story, no one would believe it, because its too stupid, but fucking hell, reality is dumber than fiction.
Holy crap! That’s wild.
Awesome story actually if you have a minute to read through. Sounds like it would be very technical but the details are easy to follow
Holy shit y’all are desperate. Your characterization is basically a straight up lie at this point. Anti ai propaganda is rotting your brains.
June when an employee on Binance’s wallet developer team thought they’d indulge in some vibe coding by installing a popular AI coding tool. But they ended up downloading a tampered installation of Homebrew,
Its a shame liable laws are so weak in the US.
It was to expect.
Someone was bound to introduce some “AI slop” & “Vibe coding” bashing into this case — true or not.
What took them so long?
… did you even read the article? Its not really bashing if it’s true
Its not really bashing if it’s true
So I’ve never had a true chance to bash trump? 😰
Imagine being this stupid. Jesus dude. Reading is fundamental.
Yeeeeeeees! All those “programmers”. Fuckwits that know nothing, just follow idiotic prediction algorithms.
Clearly see the title and get filled with rage, huh?
Read the fucking article.
It was a very sophisticated social engineering hack and nothing to do with “vibe coding”.
It has everything to do with blindly following algorithms though. Guy clicked on a malicious ad after searching for something and trusted it blindly. So the poster is actually mostly right.
🤡🤡🤡🤡🤡🤡🤡🤡🤡
