←back to thread

ACF Plugin no longer available on WordPress.org

(www.advancedcustomfields.com)
221 points michaelcampbell | 3 comments | 13 Oct 24 15:44 UTC | HN request time: 0.648s | source
Show context
maxbond ◴[13 Oct 24 19:43 UTC] No.41830919[source]▶
To me this is indistinguishable from an account takeover attack executed by an insider. I doubt any prosecutor would be interested, but to my eyes WordPress.org has violated the CFAA by accessing WordPress instances outside the bounds of their authorization. They were authorized to modify WordPress instances in ways ACF prescribed, not in ways of their own choosing.

I'm not saying I'd like to see Mullenweg in chains, I wouldn't. But WP.org's escalating legal exposure is really concerning. I feel like we're at risk of losing a cornerstone of the web. People are talking about a different open source CMS eating their lunch, but I think the more likely scenario is that people move to Square Space, Wix, Facebook, et cetera, and open source content management becomes niche.

replies(3): >>41831345 #>>41832352 #>>41833355 #
that_guy_iain ◴[14 Oct 24 01:31 UTC] No.41833355[source]▶
Well, they're literally getting sued with one of the counts being computer fraud so it's going to end up in front of a judge at some point.
replies(1): >>41833468 #
maxbond ◴[14 Oct 24 01:52 UTC] No.41833468[source]▶
I doubt the case will make it to trial. I think they'll be settling in the next few weeks. But I did double check, and you're right of course, the complaint does allege they violated the CFAA when they cut off access from WP.org infrastructure.
replies(1): >>41839536 #
that_guy_iain ◴[14 Oct 24 17:10 UTC] No.41839536[source]▶
Matt isn't going to settle. Automattic while Matt is in charge is not going to settle. And the lawsuit will be cheaper for WP Engine to take to trial than giving in to the demands. And considering what Matt has done the past few weeks, I really can't see WP Engine being in the mood to settle anytime soon.
replies(1): >>41840288 #
1. maxbond ◴[14 Oct 24 18:18 UTC] No.41840288[source]▶
We'll have to see. I could certainly be wrong. But I doubt WP Engine has qualms about settling (given the right terms) and I imagine Mullenweg will start receiving big invoices for lawyers that tell him they aren't confident they'll win at trial. He may not have much of a choice.

But anything can happen. If 12 weeks passes and the suit is ongoing, then I'll be happy to admit I was wrong.

replies(1): >>41840507 #
2. that_guy_iain ◴[14 Oct 24 18:40 UTC] No.41840507[source]▶
This won't be going to trial in 12 weeks. The discovery alone is going to be massive considering what has happened.

I'm pretty sure Matt has been dropped by one law firm, he's also had the chef lawyer for Automattic accept a buyout which I think is fair to assume this drama is the reason. Automattic's current in house lawyer commented on here that lawyers can't control their clients. Which I think is fair to assume that Matt is ignoring legal advice. Matt already knows this lawsuit is going to cost millions. And he's pouring petrol on it.

replies(1): >>41840585 #
3. maxbond ◴[14 Oct 24 18:48 UTC] No.41840585[source]▶
I misspoke, I meant if the suit was ongoing.