1y ago

Cryptobro makes a new coin to "help FOSS projects". Predictable scam rush ensues.

The disappointing tea.xyz

cross-posted from: https://lemmy.dbzer0.com/post/15238521

Yet another "brilliant" scheme from a cryptobro. Naturally this caused a gold-rush for scammers who outsourced random people via the gig economy to open PRs for this yml file (example)

Open Source @lemmy.ml

db0 @lemmy.dbzer0.com

1y ago

If you're developing a FOSS project, be aware of cryptobros trying to PR a tea.yml into it.

connortumbleson.com /2024/02/26/the-disappointing-tea-xyz/

Hacker News @lemmy.smeargle.fans

bot @lemmy.smeargle.fans

BOT

1y ago

The Disappointing Tea.xyz

connortumbleson.com /2024/02/26/the-disappointing-tea-xyz/

16 comments

this asshole pushed this dumb and bad scheme last year too.
it's not the previous scam "gitcoin", it's a fresh reimplementation of the bad idea.
he was the Original Founder Of Homebrew!!! who left ages ago, and Homebrew are busy disclaiming him as often as is necessary
- which itself is a shitty implementation of ideas stolen directly from Nix (specifically it’s a much worse nix run or comma with bits and pieces yanked straight from direnv), but with the, ah, sensibilities that can only come from the experience gained implementing one of the worst package managers
  I dug in and there’s also this related mash thing that appears to just be an unvetted index of scripts you can pull in and execute with no idea what they’ll actually do
  We have not vetted any of the scripts mash can run and (currently) they can do anything they want to your computer.
  We fully intend to add sandboxing and user reporting, but you have found mash super early in its life so you must practice caution in your usage.
  fucking genius. your killer app is a vector for malware cause in your excitement to release this shit you designed in like 10 minutes, you decided to push all the hard (and/or impossible — fucking sandboxing?) parts off until later
you know, I'm strongly in favour of attempts at novel ways to fund open-source development, because there's still significant issues to be solved there. but
ugh god really? this thing is some awfully halfwitted dogshit even by the standards of the coiners
fucking rage
not that I mean to praise the attempt here, to be clear. it is, of course, utter and complete bullshit. that it latches on to this particular problem irks me even more.
it also leaves me wondering whether this type of problem/parasitism (at this tier of scale attempt, perhaps?) has a long lineage? previously there were things like dns alt roots, which occasionally got some under-informed/unlucky suckers, but this kind of low-effort attempt at intermediating themselves as tollmen isn't something I know of past analogues to
He's lucky that implementing a cryptocurrency doesn't require inverting a tree.
- I understand that reference!

16 comments