How far would hostile distributions go to hurt application developers?