Maybe this is proof of time-travel.

NO. NO TIME TRAVEL. NO ALIENS.

Every fucking time we learn something cool about our ancestors someone attempts to undermine it with shit like this.

Neanderthals doing dentistry is way, way, way cooler and more interesting than your fucking woo.

Every single time.

This is exactly the type of comment I'd expect from a time-traveling alien trying to cover its tracks.

Why did you create us? Why do you hide in the shadows?!

This seems like a bad idea, but.. I’m no kernel dev.

What’s misleading?

"Novel Campaign Abuses Obsidian Note-Taking App to Target Finance and Crypto Professionals with PHANTOMPULSE RAT”

It’s novel (new), an abuse of Obsidian, specifically targeting a group of people.. and the RAT is embedded in the vault.

The headline on HN is different: "Obsidian plugin was abused to deploy a remote access trojan". It's not a plugin that was abused, but the ability for shared vaults to contain plugins.

Isn’t that nearly the same thing? It depends on the presence of a particular plugin which was abused to run remote commands.

No. The attack does not depend on the presence of a specific plugin. The ones listed in the article are just the ones that were used in the POC. Any plugin could be modified by the attacker if the user trusts the attacker and accepts 1. the vault, 2. the shared plugins, 3. disables restricted mode.

It does.

> It enables malicious versions of legitimate Obsidian plugins ('Shell Commands' and 'Hider') that are present in the shared vault.

Thanks! I also scanned the detailed article looking for which plugins were affected and wasn't able to find it. Came to the comments looking for a quicker answer.

On the other hand, I found it quite pleasant and subsequently forgot about it. It’s out of my way and I focus on the task at hand.

> Apple's software incompetence is absolutely universally hated

Weird. Maybe he spent too much time on ChatGPT and got AI psychosis.

After letting Mulder go early, I’m not surprised.

One of the reasons why these kind of software is not allowed is that it opens up a new class of social engineering attacks (install this, run this code) against users that have normally placed great trust in their software.

What does SpaceX get out of this deal?

What’s old is new again.