4 ms·
Most vendors have separate engines for detecting malicious scripts. I'd assume notarizing is more about executables, in which case it would be checking the sign
by mrits 6y ago
Most vendors have separate engines for detecting malicious scripts. I'd assume notarizing is more about executables, in which case it would be checking the signatures around the shell binary.
Also worth noting "echo" doesn't spawn a process but is a routine in the shell itself. If you replaced echo with something that does spawn a process "like scp" it would be interesting to see the results. And if that's doesn't introduce latency then I'd try it with some hello world programs with a UUIDv4 in the binary to ensure they haven't seen the hash before.
- saagarjha 6y ago> Also worth noting "echo" doesn't spawn a process but is a routine in the shell itself. In Bash echo is a builtin but /bin/echo also exists if you do actually want to spawn a process.