#SaveOurInternet @SaveOurInterne

After watching these videos about the XZ backdoor (like this one: youtube.com/watch?v=F7iLfu…) and finding out everything my jaw was literally through the floor. I am in disbelief. This channel fern talks about finding ”The next XZ backdoor” we won’t be able to find another XZ backdoor because we will all be six feet under. The likelihood of finding this backdoor was incredibly low. This channel is making excuses to do nothing. They all are. verisatium too. if they actually had backbones they would dedicate all of their time to this problem until it is fixed. The fact that it is somehow this easy to hack the world’s most critical infrastructure because Linux added such a pointless dependency to Ubuntu and Debian, and yet not a singular person out of the millions that have watched these channels questioned how unbelievably stupid and terrifying the thought of that even is. So it’s apparently fine that unpaid volunteers are maintaining the entire world’s infrastructure including data centre infrastructure? Why aren’t we doing anything? Random GitHub FOSS project dependency usage to underpin our entire internet is the worst idea ever proposed in tech and is threatening our planet, and yet it’s also the notorious idea with the least backlash. How is this problem not taken seriously in the slightest? Why is no one talking about this? Where on this blue planet are the phone calls & emails to the world’s most powerful governmental bodies about this? Where is the action being taken by digital rights groups and organisations against this? Why are we just writing articles about this backdoor like our futures weren’t literally under threat for a second? ”It’s like finding a nuke under a car” We almost had WW3, for pete’s sake. This monotone, unserious attitude is literally why nobody is doing anything. We almost had countries accusing each other of a global cyberattack because of a bug in a FOSS project they can’t trace the origin of and starting a nuclear war and yet there hasn’t been a single criticism against Linux, the world’s most important infrastructure, being maintained by unpaid volunteers who aren‘t even tech security experts of any sort. Nobody is taking this problem seriously except for me; I’m going beyond just talking about it and are actively trying to get people to call and email their country’s governmental bodies about this. I’m not going to sit on my chair writing articles and making videos about this, basically doing nothing about this until disaster strikes. That’s not happening. Why are tens of millions of people doing nothing? Why are there channels with tens of millions of subscribers doing nothing? Why are the channels covering this backdoor doing nothing? And it’s not just this, either, there have been other incidents where we’ve been close to a potential WW3, and these said other incidents originate from the same root problem: The PHP programming language very narrowly avoided getting backdoored, and because it’s used in millions of websites it could have affected the entire internet: sophos.com/en-us/blog/php… The DNS (Domain Naming System) had a bug in 2008 that could have threatened the internet if it wasn’t fixed by one guy called Dan Kaminsky, since the DNS powers the entire internet: youtube.com/watch?v=yf-mNL… x.com/robrhyne/statu… gpsd was just weeks away from having a Y2K bug that could have infected the whole world (note that gpsd is used in SATELLITES): theregister.com/2021/10/19/gps… Log4j had an exploit that had the potential to infect the whole world if there wasn’t a patch available a few days earlier, and was dubbed “apocalyptic”: turn-keytechnologies.com/blog/article/w… a single line of code in Cloudflare (yes, one line of code that’s probably like 40-50 characters long) almost broke our entire internet: youtube.com/watch?v=o8ZIDU… also npm had an incident where just a few lines of code being deleted were enough to take down tons of websites and services. And yet that’s top notch security according to everyone on the planet except me, apparently. Especially with PHP, XZ and Cloudflare, these are all comparable to the Cuban Missile Crisis and the 1983 Soviet nuclear false alarm incident. We would not be alive right now if we hadn’t gotten so unbelievably lucky. The safety of billions of people completely depends on how we handle this problem and so far absolutely nothing of any sort has been done to fix it in the slightest. It genuinely feels like we’re heading for a nuclear Armageddon in the next few years because we did absolutely nothing until disaster struck. I can hardly even fathom the idea of aliens visiting the ruins of our planet 1000 years from now and wondering how in the sun and stars did we end up just vanishing one day without a trace, our civilisation reduced to rubble with radiation everywhere. They’d be very generous with us and think it was because of a political conflict that lead to a global nuclear war and not something like a bug in a dependency used unreasonably much across the entire internet, or a small bug in a horribly maintained operating system that’s used to power our entire web almost like the bug is supposed to collapse our species. And yes dependencies are used to power government, charity and hospital websites as well. How are the corporations that use Linux heavily actually sane and like, not actually just…stupid? By depending on an operating system this unbelievably easy to destroy they’re just shooting themselves in the foot. I can’t believe I’m even saying this, but I’d rather just have Windows power our entire internet. How stupid are we as a species to use FOSS projects, that can very easily break, to just barely underpin our entire internet? How have we never considered the consequences of this and what this could lead to? The security of that is below F tier. Also every instance of Linux they use is connected to OpenSSH because might as well make everything vulnerable I guess; web.archive.org/web/2024072403… Linux has zero business being the world’s most important operating system and as soon as it started being used religiously should have shut down development of Debian and Ubuntu and moved all package updates to another version without the core benefits that Debian and Ubuntu have. CentOS is no longer updated and yet it’s still used to power literally everything from websites to data centres massively. There’s no problem there because it doesn’t risk any backdoors or bugs. “XZ is a critical library in Linux” why? What’s the point of it being critical? Especially when it and Linux’s other applications and packages don’t even play a part in any infrastructure Linux powers. Why can’t these maintainers understand that supporting Linux is actually a bad thing? We cannot continue to support what is pretty much the literal reason why corporations are digging through unreasonably vulnerable GitHub repositories religiously to find as many projects to underpin their stuff as possible. Linux, the internet’s most important infrastructure, shouldn’t have any package updates by unpaid volunteers if it’s this unbelievably easy to hack the planet. You just start to wonder why the corporations using Linux didn’t just use modified parts of it to power their infrastructure instead of like, the whole operating system. Why are we ignoring and therefore enabling the idea of unpaid volunteers working on the data centres that run on Linux, that are the infrastructure powering our entire internet? Why are these said volunteers worried about payment and not the lives that are in danger because of this? Payment won’t magically make the problem go away. Payment will hardly solve anything. ”But the companies cannot win” They have *been* winning. These maintainers knowing their projects will be used as dependencies to underpin infrastructure and making them that easily accessible *and* never learning from past times their projects were used heavily, is feeding these corporations new dependencies. New giant potential backdoors/bugs that could threaten our planet. They are not the voice of reason here. Whatever they’re trying to do is not worth feeding these corporations dependencies to put our entire species at risk. Phone calls and emails need to be made, not articles on how “poor” these people are. ”Why are you being so negative” the safety of countless citizens is at stake. my future is at stake. My safety and family is at stake. Your safety is at stake. All it takes to collapse a civilisation is a bug in a widely used FOSS dependency and nobody cares about that at all? Absolutely stunning stuff! My video talking about this problem got the most unserious comments you could imagine compared to talking about something like, I don’t know, elephants. Why are we supporting xkcd, a grown man, depicting our species being annihilated, including tens of millions of children being vaporised/mutated by radiation as a “funni rock stack tower meme”? This is not a problem to dumb down into anything trivial. Why haven’t these FOSS developers called or emailed a single governmental body about this and why have they continued to make more of their projects vulnerable knowing that their projects will end up as a dependency everywhere anyway, and knowing that Linux, being maintained by unpaid volunteers who aren’t even cyber experts, has therefore no business being used to power our entire internet? ”But the free software movement” why are we more concerned about the maintainers getting paid then the enormity of this problem and the apocalyptic potential it has to wipe our species? once again, paying the maintainers won’t magically remove pointless dependencies from our infrastructure. these developers that these maintainers are at least understandably trying to appeal to are inseparable from these corporations because these corporations have web developers for them. if the free software movement‘s goals require making their projects accessible to the point of being used as dependencies then neither Linux nor the free software movement should ever have been things. My future is at stake because nobody has common sense here, especially not these corporations. We’ve actually failed as a species if nothing is done and a third world war happens because of this. Saying stuff is not enough; we have got to do something. The fate of the planet is on our hands.

@nym Please take your time to read: x.com/SaveOurInterne…

#SaveOurInternet @SaveOurInterne

2 months ago

hello @omarsbigsister @CyberTechWolff etc. please read this carefully. there is a problem with the internet that is threatening all of humanity and you need to look into it immediately. you might even be humanity's last hope. there are free and open-source software projects

7 3 7 5K 16

@omarsbigsister please take your time to read my tweets especially my pinned post. our futures are at stake if we don't stop web dependency usage.

@omarsbigsister the xz backdoor was the closest we've ever gotten to WWIII and how it was found was a miracle. if it had gotten through, our entire internet would not exist right now

@omarsbigsister x.com/SaveOurInterne… please read this. this is the biggest threat to the internet yet and it's worse than kosa and kids and chat control combined

#SaveOurInternet @SaveOurInterne

2 months ago

hello @omarsbigsister @CyberTechWolff etc. please read this carefully. there is a problem with the internet that is threatening all of humanity and you need to look into it immediately. you might even be humanity's last hope. there are free and open-source software projects

7 3 7 5K 16

Posting this here just so you can see: @towinrei hello can you get my post to @omarsbigsister please? she hasn't been responding to any of my replies and yet i'm trying to bring something beyond important for our entire species's survivability to her attention. we have had multiple backdoors that got really close to compromising our entire internet and yet all anyone has done is write articles about it. zero phone calls or emails, zero protests, nothing. and these backdoors have the same root: dependencies. for instance, the xz backdoor almost infected our entire internet because it got through with xz utils, a project sabotaged by bad actor to have this backdoor, being in linux, and linux being developed by unpaid volunteers, and linux is used to power our whole internet including tens of millions of websites and whole data centers. I haven't seen a single criticism against unpaid volunteers developing the world's most important infrastructure after this situation. Not one. i actually feel like the fate of the entire world is in my hands because everyone else has been ignoring this problem. And yes this even includes some of the people from her discord. x.com/SaveOurInterne…

#SaveOurInternet @SaveOurInterne

2 months ago

hello @omarsbigsister @CyberTechWolff etc. please read this carefully. there is a problem with the internet that is threatening all of humanity and you need to look into it immediately. you might even be humanity's last hope. there are free and open-source software projects

7 3 7 5K 16

We’re not doing nothing. Nothing is not an option. Writing articles about how close we’ve gotten to a third world war because our internet almost got backdoored multiple times is not the “help” you think it is.

@omarsbigsister @insolventXBT x.com/SaveOurInterne…

#SaveOurInternet @SaveOurInterne

2 months ago

hello @omarsbigsister @CyberTechWolff etc. please read this carefully. there is a problem with the internet that is threatening all of humanity and you need to look into it immediately. you might even be humanity's last hope. there are free and open-source software projects

7 3 7 5K 16

@omarsbigsister there were multiple backdoors such as the XZ backdoor that almost destroyed our entire internet and yet there hasn’t been a single phone call made against dependencies

hello @omarsbigsister @CyberTechWolff etc. please read this carefully. there is a problem with the internet that is threatening all of humanity and you need to look into it immediately. you might even be humanity's last hope. there are free and open-source software projects powering our entire web. they are developed by software maintainers and because they are free software, they are used as dependencies in web development because that means the companies using them won't have to build their own software to power their infrastructure and websites, despite said projects being very easy to backdoor due to the lack of resources, security and maintainer experience. Linux is used to power millions of websites, all data centers, a lot of critical infrastructure, basically the entire internet, and yet it's maintained and worked on by regular unpaid volunteers, who can very easily have their projects sabotaged and hacked, therefore compromising all of Linux and threatening the collapse of human civilisation. Critical infrastructure powering our whole world is developed by unpaid volunteers, who can very easily mess up, with hardly any experience in tech, coding, and programming. Think about how bad the security of that is. now to the terrifying part: there have been multiple instances where we have been close to the destruction of humanity, our entire species, because of this, and i kid you not: everyone is treating this like it's no big deal. No one is doing anything to contact the world's governments about this, nothing. Tens of millions of views on videos talking about this haven't lead to a singular phone call to any powerful person on this issue, and I've tried to convince people about it only to no avail. These projects being used as dependencies are underpinning our world and yet have no security at all; they can very easily be destroyed and, as demonstrated with the XZ backdoor situation, are very easy to backdoor, and yet nobody cares; it's beyond unbelievable! here are the said instances I'm referring to: - PHP, a programming language which is used by 80% of all websites, was almost backdoored: sophos.com/en-us/blog/php… - The DNS (Domain Naming System) had a bug in 2008 that could have threatened the internet if it wasn’t fixed by one guy called Dan Kaminsky, since the DNS powers the entire internet: youtube.com/watch?v=yf-mNL… x.com/robrhyne/statu… - gpsd was just weeks away from having a Y2K bug that could have infected the whole world (note that gpsd is used in SATELLITES): theregister.com/2021/10/19/gps… - Log4j had an exploit that had the potential to infect the whole world if there wasn’t a patch available a few days earlier, and was dubbed “apocalyptic”: turn-keytechnologies.com/blog/article/w… - a single line of code in Cloudflare (yes, one line of code that’s probably like 40-50 characters long) almost broke our entire internet: youtube.com/watch?v=o8ZIDU… - there was a backdoor that almost made its way to Linux distros, and because Linux is widely used to underpin critical infrastructure such as data centers, it could have been catastrophic for the internet and world especially politically: youtube.com/watch?v=F7iLfu… there was also an npm supply chain attack narrowly avoided that could have affected every website using npm which is like, 99.99% of the entire internet. These all could have had the potential to take down most of the internet, get countries to accuse each other because the origin of whatever bug/backdoor took down everything can't be traced, start WWIII and kill hundreds of millions of people if not billions and pretty much all of humanity, since the internet underpins entire countries because of how heavily used it is. “How are none of these projects with billions of yearly downloads everywhere in the news” Correct. I know, right? I know, I know, I know, I know. You’re right. Our futures are being threatened because none of these are everywhere right now, and yet nobody seems to care? Our lives are about to be destroyed because this recurring issue isn't being taken seriously enough? no one, not a single person, not even xkcd, andres freund, lasse collin or even those fucking giant channels with millions of subscribers and with the POWER to stop it, is/are fearing for their lives or worried for their futures. this is a mass psychosis that could very well lead us to World War III. ever since the xz backdoor incident i haven't seen a single criticism against linux, which is maintained by unpaid volunteers whose projects are extremely easy to sabotage to compromise the entire linux operating system, being the world's most important operating system that powers data centers, websites, basically the entire internet. i tried to spread awareness about this in discord servers. despite this being an impending tech doomsday for humanity that has the capability to start WWIII, nobody has cared. again, it’s a mass psychosis. the european union, the united nations, the US congress, microsoft, google, the most powerful people on the planet, we can call them about it, tell them how bad it is and bring up these examples. if we can convince governments to cut ties with these tech coporations and the USA and put a stop to this for good, we can put a stop to not only KOSA and every other bad internet bill, but even save the entire world. we might even become celebrities for it. i am serious. if you focus on this problem full-time you are focusing on every single bad internet bill full-time at once too. also we can stop the usa government from developing exploits to prevent more WannaCrys especially if a WannaCry is unpatchable. medium.com/@corpseleague/… this article I wrote back in 2025 lists a whole bunch of projects that are just barely keeping humanity afloat with almost zero adequate security this is a problem that you just can't not dedicate all of your time to because it means that an apocalyptic event can happen at any given moment. it can happen a few years from now. it can happen next year. it can happen next week. or even tommorrow. there are so many examples that every passing day is just one step closer to the annihilation of our species. Not even the maintainers are taking it seriously and have done nothing to learn let alone comprehend the idea that as long as it’s public, their free software will be used by these corporations no matter what and therefore they should private their stuff and put our species before developers. these corporations are inseparable from developers and always will be, no matter what. it’s way worse than everyone thinks and it’s threatening our futures. I emailed Google about this. I told them about the XZ backdoor and how it could have infected their infrastructure everywhere since it runs on Linux, which is maintained by unpaid volunteers. They knew this and never stopped to realise how bad of an idea it is to have your infrastructure run on an operating system worked on by unpaid volunteers one of which can very easily backdoor a package and infect our world. If they were sane they would have used the XZ backdoor situation to massively reconsidered dependencies and hold a global emergency. the XZ situation was the closest we have ever been to WWIII and yet no changes of any substance was made. nobody cares. i’m the only guy who’s actually worried about our futures. like. shocker. fern is spreading misinformation that we will absolutely detect future XZ backdoors and is using that not to do anything. (the xz backdoor was a few hours away from being shipped and required extremely specific, precise circumstances/coincidences to come together to detect it) they claim to support Gaza but in reality by refusing to do anything against this, they are enabling their deaths. they, Verisatium and xkcd are pure evil. xkcd actually drew a silly comic (Dependency) depicting the scenario where human civilisation collapses and millions of people including children get vaporised form a world war starting between countries because of this problem. I’m on my knees. I'm worried about our futures. this should radicalise you. dependencies have no security and are extremely easy to break. you could save humanity as a species and our futures; there is a problem with the internet that has the apocalyptic potential to start a Third World War. paying the maintainers is nowhere near enough and ties need to be cut with these corporations permanently. countries need to be against the USA and Linux for popularising FOSS dependency use. please scroll up to read this carefully. Gather as many famous internet icons as you possibly can. We have to save our internet from being backdoored or having any apocalyptic bugs in dependencies used in web development for websites.

rob rhyne @robrhyne

5 years ago

Dan Kaminsky once found a flaw in DNS that would have basically destroyed the internet and helped fix it in secret. Doesn’t get any more legendary than that. RIP.

0 159 632 0 10

HOW IS NO ONE FREAKING OUT OVER THIS?!

@omarsbigsister @Iovelybits @omarsbigsister

@omarsbigsister @Iovelybits x.com/SaveOurInterne… this is something you must read. there have been multiple instances where we’ve gotten close to WWIII just because of bugs in the web’s widely used dependencies underpinning the entire internet. The infamous example being the XZ Utils backdoor.

#SaveOurInternet @SaveOurInterne

2 months ago

hello @omarsbigsister @CyberTechWolff etc. please read this carefully. there is a problem with the internet that is threatening all of humanity and you need to look into it immediately. you might even be humanity's last hope. there are free and open-source software projects

7 3 7 5K 16

If adding your packages to Linux results in more unnecessarily critical libraries and dependencies and all that that can very easily be backdoored and create consequences for the entire planet then maybe supporting Trovalds’s work and Linux’s development isn’t worth it.

@omarsbigsister @CyberTechWolff @DeepHumor please give this a read!!

@omarsbigsister x.com/SaveOurInterne… @omarsbigsister please read this! There’s an even bigger threat to our internet than bad internet bills and it’s fragile web dependency security

#SaveOurInternet @SaveOurInterne

2 months ago

hello @omarsbigsister @CyberTechWolff etc. please read this carefully. there is a problem with the internet that is threatening all of humanity and you need to look into it immediately. you might even be humanity's last hope. there are free and open-source software projects

7 3 7 5K 16

@omarsbigsister @CyberTechWolff @Kuuhaku3993 @SirenIsFree