4 ms·
Look no further than the chain of xors that amount to ... ^ 0x22. These people really don't know much. ISTM, the only interesting thing is the "user-mode root
by FullyFunctional 7y ago
Look no further than the chain of xors that amount to ... ^ 0x22. These people really don't know much.
ISTM, the only interesting thing is the "user-mode rootkit" mentioned in the beginning. Anything installed after that is moot and completely irrelevant. If anyone gets root on your machine, it's already game over.
However, if your attack vector is getting me to execute a random .sh from you, then I'll roll my eyes and get on with life.
- jorangreef 7y agoIf your email firewall allows random .sh attachments, then you are vulnerable to at least two attacks: 1. Someone targets you specifically, knowing you are a software developer, by impersonating a trusted third-party contact and sending you a ZIP attachment with the contents of an open source project you are known to work on. ZIP attachments preserve the executable bit, and you wouldn't see any .sh extension because it would be an extension-less shell script. It would probably just look like a binary you are used to clicking. 2. Someone impersonates a trusted third-party contact, sending you a ZIP attachment with a symlink traversal to overwrite your .bashrc as soon as you unzip the attachment with a double-click, or as soon as unpatched middleware unzips it for you.