4 ms·

New hotness: Pwning devs with targeted poisoned stacks

• valuearb 6y ago
  Poisoning StackOverflow posts that some developers will easily detect, report and have removed seems like a “stupid” hypothetical that this “brilliant” hacker has sold to a reporter.
  • deleted 6y ago
    [deleted]
  • Mizza 6y ago
    Weirdly enough, this article is about me. I only noticed because I read HackerNews - I was never contacted by the author. The talk was a comical one, not one meant to be a grand security revelation reported in this way.
• rileymat2 6y ago
  > Jones advised basic steps for devs such as not storing production code on their local machine... This does not sound basic at all.
  • Mizza 6y ago
    In my talk, I said production data, not production code.
    • rileymat2 6y ago
      That makes much more sense.
  • srtjstjsj 6y ago
    This is how big companies with professional IT operate.
• Mizza 6y ago
  As I mentioned in another comment, I'm apparently the person who said this, but I think the tone of the article strips the talk of all of its context. The talk was largely meant to be salty and humorous, not critical security advice. Talk here: https://www.youtube.com/watch?v=Zu4zzfbvO_w https://www.youtube.com/watch?v=Zu4zzfbvO_w
  • srtjstjsj 6y ago
    The article seems fine and it's good security advice. It's absolutely right that quite many developers constantly download and run hundreds of unverified 3rd party programs.
    • perl4ever 6y ago
      http://gkoberger.github.io/stacksort/ http://gkoberger.github.io/stacksort/