3 ms·
Well, as a lot of developers use OSX, i could see the potential of making code / token / authentication sniffing malware that sniffs out git credentials and oth
by calgoo 8y ago
Well, as a lot of developers use OSX, i could see the potential of making code / token / authentication sniffing malware that sniffs out git credentials and other authentication tokens. This could then be used to gain access to backend servers and/or injecting backdoors and malware into software.
- acdha 8y agoThis bug requires local code execution capabilities. How many of the scenarios you describe are there where someone couldn’t simply use that to harvest credentials directly?