Guo Yipu from Aofei Temple
Quantum Bit Report | Public Account QbitAI

This Christmas, many developers found themselves fired by their bosses.

There is no N+1. This is not a layoff, but taking the blame for the accident.

The accident occurred on a button on the UI interface. After Christmas Eve and Christmas approaching, a piece of snow suddenly appeared on the button of the front-end page developed by these developers, accompanied by a prompt "Ho Ho Ho!"

△ Picture from CSDN

△ The picture comes from Weibo user Bu Ge Li Mian Noodles

I didn't do anything, why did the front-end effect suddenly change?

It turns out that an "easter egg" was quietly placed in the open source framework (also known as the "wheel") that these developers use on a daily basis.

This wheel comes from Ant Financial, called Ant Design , or antd for short. It claims to be a "design system serving enterprise-level products" and is committed to "allowing designers and developers to focus on better user experience."

Moreover, the wheel has a huge impact and has 38,964 stars on GitHub .

You should know that Christmas is not just a festival for eating, drinking and having fun, it is a Christian religious holiday.

And it is this serious wheel that serves enterprise-level products that has been added with an Easter egg with religious connotations.

But unfortunately, many developers, when developing serious government projects, military projects, and even religious projects, are unaware that there are Easter eggs in the wheel and use them directly.

Think about it, Alibaba, Ant Financial, a big company producing high-end wheels, there must be something right.

So, the disaster scene——

A front-end engineer named mango posted on Zhihu a project he worked on for a government department, "Luckily the person he was working with was my sister-in-law, so everything was fine."

Western Christmas Easter eggs appeared on serious party and government websites.

It looks like the text was sent from the WeChat chat box itself. I hope it was just a complaint and no one was caught seriously...

In addition, the websites of all kinds of companies and institutions, large and small, were covered with an inexplicable layer of snow and the prompt "Ho Ho Ho!"

Where did the Easter eggs come from?

Where do these embarrassing Easter eggs come from?

The author of the easter egg is the largest contributor to the And Design project, named "偏右", ID: afc163.

On September 10 this year, Pianyou had an idea and submitted this easter egg to GitHub.

After submission, a layer of snow and a “Ho Ho Ho!” prompt will appear on all buttons on the page developed by Ant Design.

At that time, some people also discovered the existence of Easter eggs, but no one paid attention to it.

In other words, this Easter egg has been stored in the code for more than three months. Without notifying anyone, it automatically went online and lurked quietly, preparing to launch an attack on Christmas Day.

Huge power

Although the snow on the button does not affect the use of the website, it is enough to cause a crisis of trust.

Not only is it extremely inappropriate for the above party and government websites to have Christmas-related content, but the project staff involved may be held responsible;

And if a developer serving religious clients uses it, the consequences will be disastrous;

Even if it is just a B2B development service, if the website developed by the company for the client suddenly changes, it is inevitable that people will think "Is this development company unreliable?" and suspect that there is a backdoor, which seriously damages the business reputation and the order that was hard to get may be lost;

For example, a developer who served the military had an Easter egg appear on his page without an internet connection...

There are also unfortunate developers who are forced to start reviewing the source code of Vue:

Therefore, this also caused Ant Design and Ant Financial to suffer a lot of complaints:

Some people think it is more appropriate to call it a landmine...

Turn all buttons into dumplings during the Spring Festival?

Not bad, this guy is really a product manager who is delayed by writing code, a Growth Hacker!

The instigator came out to apologize

This caused huge problems, so the right wing quickly came out to apologize and released a solution.

Unfortunately, users of Ant Design may not be able to bear it psychologically.

In addition to the apology, some people also raised the issue of the maintenance process of this open source project.

For similar projects with great influence, PR and code review cannot be ignored, especially when the person who proposed the commit is the biggest contributor to the project and has great influence.

The open source community still needs to abide by the usage specifications.