4 ms·
The title is inflamatory, sensational, and misleading - albeit effective. As others have pointed out, this isn't a "linux trojan" as much as it is a "software
by alttab 16y ago
The title is inflamatory, sensational, and misleading - albeit effective.
As others have pointed out, this isn't a "linux trojan" as much as it is a "software source code repository hack."
Dropping a trojan into someones unguarded source repository can happen on any system. This isn't anywhere close to a "security breach" for linux because people still had to download and compile source.
This raises an interesting question - do you trust the source you build? But that's a different issue. The closest thing to Linux security issues is the null pointer bug which allows arbitrary execution as root. And that's like one in 25 years as far as I know.
- djb_hackernews 16y agofollow up interesting question - do you trust the compiler you use to build from source?
- JoachimSchipper 16y ago"One in 25 years" is far too optimistic (see e.g. http://secunia.com/advisories/product/2719/?task=advisories http://secunia.com/advisories/product/2719/?task=advisories - the NULL pointer bug was exploitable only from programs already running on the host, so most of these "count" by your criteria), but yes - the article is nonsensical.
- 0bfusct3 16y agoLinux has exploitable bugs about once a week, read lwn and scan over the security page for kernel cve's.