this post was submitted on 11 Mar 2025
739 points (99.3% liked)

Technology

66231 readers
5314 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
739
Developer convicted for “kill switch” code activated upon his termination (arstechnica.com)
submitted 2 days ago by WetBeardHairs@lemmy.world to c/technology@lemmy.world
113 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] GhostlyPixel@lemmy.world 135 points 2 days ago (7 children)

This kill switch, the DOJ said, appeared to have been created by Lu because it was named "IsDLEnabledinAD," which is an apparent abbreviation of "Is Davis Lu enabled in Active Directory."

Lu named these codes using the Japanese word for destruction, "Hakai," and the Chinese word for lethargy, "HunShui,"

[Lu]’s "disappointed" in the jury's verdict and plans to appeal

No, this guy is cooked, there’s even evidence of him looking up how to hide processes and quickly delete files, absolutely no way an appeal would work out for him, I don’t think an “I got hacked” argument is going to work.

[–] snf@lemmy.world 8 points 2 days ago* (last edited 2 days ago) (1 children)

It's actually kind of worrisome that they have to guess it was his code based on the function/method name. Do these people not use version control? I guess not, they sure as hell don't do code reviews if this guy managed to get this code into production

[–] TAG@lemmy.world 2 points 1 day ago
  1. I assumed that the code was running on a machine that Lu controlled.
  2. Most companies I have worked at had code reviews, but it was on the honor system. I am supposed to get reviews for all the code I push to main, but there is nothing stopping me from checking in code that was not reviewed (or getting code reviewed and making a change before pushing it). My coworkers trust me to follow the process and allow me to break the rules in an emergency.
load more comments (5 replies)