4 ms·
It seems like the attack is not completely quiet as an error is printed while installing a modified package, either from compromised mirror or by man-in-the-mid
by efiecho 8y ago
It seems like the attack is not completely quiet as an error is printed while installing a modified package, either from compromised mirror or by man-in-the-middle:
ERROR: ${package_name}: BAD signature
Remote code execution will happen, but at least you will get a warning that something suspicious is going on.
- owl57 8y agoThat is even red and there's no obvious way for the attacker to disable that. But do people really look at the build log as long as the build is successful and the intended containerized program seems to work just fine?
- rmetzler 8y agoMaybe it's possible to overwrite already printed lines with terminal sequences.