3 ms·
P2P-sharing would be a really great solution to this from the malware developer's point of view. I don't harbor any ill-will towards malware devs, especially no
by too_late 11y ago
P2P-sharing would be a really great solution to this from the malware developer's point of view. I don't harbor any ill-will towards malware devs, especially not when they're going after windoze machines :^)
But yeah, the curl website could really come up with a lot of data, so it seems like a very immature solution to what is really a critical component of the app to just blindly reach out for some predefined url. It'd be way smarter to run a CC machine somewhere and start pairing some peers. curl is somewhat small, right?
I think they'll probably just keep renaming the file for now, and updating the URL. It'll just be cat and mouse, and newer versions ship with it, so there's really no point for the curl maintainers to be wasting too much time on it since it's a limited-time issue that will more than likely sort itself out later.
- Brotkrumen 11y agoYeah! Them people that don't share our hobbies and choices can get fucked, right? I mean transitioning to linux is so easy and relearning a new ecosystem so painless. Them scam victims deserve whats coming for them! I also agree that malware devs are dumb. Instead of using that curl download in a way they know works, they could just add a p2p module to their malware, open up a few ports on infected machines and hide all that from av. Easy right? I mean them archive urls change all the time! And updating that via the cc is just too unelegant!
- too_late 11y agoIf I can do it, anybody can. It is hilariously easy to hide arbitrary code from antivirus. I can tell that you don't actually know what you're talking about, but suffice it to say that escaping some AV product is no mean feat in anyone's book. Who gives a fuck about people who can't be bothered to learn about the tools they use? I have as much sympathy for inept windows users as I have for people on the side of the road that break down and don't know how their own car works. The curl download that 'just works' has just been broken by a simple 'mv arch1.zip arch2.zip' basically. It doesn't take a hacker to come to the conclusion that maybe there's a smarter way. Most of the highly-advanced botnets that I've seen are capable of p2p communication or some such similar functionality.
- zajd 11y ago> I have as much sympathy for inept windows users as I have for people on the side of the road that break down and don't know how their own car works. You sound like fun at a party