4 ms·
By that same token, use of sudo is a legitimate signature of the malware. That said, its a really shitty signature with lots of false positives -- catbot is ex
by subway 9y ago
By that same token, use of sudo is a legitimate signature of the malware.
That said, its a really shitty signature with lots of false positives -- catbot is exactly the sort of strange names I assign to hosts or projects.
- userbinator 9y agocatbot is exactly the sort of strange names I assign to hosts or projects. ...and also doesn't look too out-of-place as a gamer handle --- in other games I've seen players with variants of 'cat' and 'bot' in their names (catman, botman, catfish, fishbottom, etc.), which didn't seem to be cheating either. If it was a name with more "entropy", like jH3bzKflAC5, then the case for it being a signature might be far clearer.
- FRex 9y agoIt's about the local Linux account name (which frankly Steam has no business touching or inspecting the contents of past pasting it into a path IMO), not the in chosen steam name (which can be anything) nor the unique steam name in profile link (which I think comes from the login, I'm not sure now). In any case - both are all over the place and in online games there are often crazy names that look like the came from /dev/random. It'll also be easily circumvented now that it has been discovered and it was dumb in the first place. Valve really dropped a ball, it's not like they don't know how crazy, meme fulled or troll-y usernames get on their platform. Outright VAC ban (that's a big deal) for something like that is absolutely idiotic (extra inspection that doesn't affect anything for legitimate users - sure).
- deleted 9y ago[deleted]
- Zpalmtree 9y agoUnique steam urls' have to be manually set and don't exist by default.
- throwaway2048 9y agoValve can easily query who has the usernames catbot, and then correlate it with hack like activity, and draw the conclusion that false positives aren't an issue in the real world. After all the banwave only hits once.