4 ms·
Curl is suspicious, people might wonder what exactly its doing. Whereas nobody has the time to read and understand C/C++ code.
by jdsully 7y ago
Curl is suspicious, people might wonder what exactly its doing. Whereas nobody has the time to read and understand C/C++ code.
- jandrese 7y agoIt will almost certainly take longer for someone to read your Makefile to notice that weird curl line than it would be for someone to try to compile your code as a regular user and have the compiler spit out an error because it can't read the include file "/etc/shadow".
- jdsully 7y agoHave make suppress error messages for the .o including it. You can have another file implement any missing symbols with a weak attribute so the linker will not complain if your evil object file fails to be built. If you go with C++ then you have an entire Turing complete language executed at compile time to do whatever nasty thing your heart desires. I agree there are much easier alternatives... but it's an intellectually interesting attack vector.