3 ms·
Well this is an interesting detail: The court-ordered search Yahoo conducted, on the other hand, was done by a module attached to the Linux kernel - in other wo
by bostik 10y ago
Well this is an interesting detail: The court-ordered search Yahoo conducted, on the other hand, was done by a module attached to the Linux kernel - in other words, it was deeply buried near the core of the email server operating system, far below where mail sorting was handled
In other words, a lot of effort was spent to hide the very existence of the code. Injected into systems in a stage far from the intended scope, and made to persist across upper level application rewrites.
No wonder their security team freaked out when they discovered it.
- sschueller 10y agoCould putting such a thing in the Linux core not also open vulnerabilities which a Hacker such as the "state sponsored" one could have used to steal yahoo's user data?