3 ms·
It's a bit unclear as to what's going on there. Is the codebase itself compromised? Did the developer's computer get compromised? Did one of the external lib
by Gordonjcp 4y ago
It's a bit unclear as to what's going on there.
Is the codebase itself compromised? Did the developer's computer get compromised?
Did one of the external libraries that it pulls in from git get compromised?
- ale42 4y agoLooks like the dev's computer got compromised, maybe by someone looking for bitcoin wallets. See here: https://github.com/lawl/NoiseTorch/issues/254 https://github.com/lawl/NoiseTorch/issues/254
- eole666 4y ago"Found a very suspicious process in htop. Paniced. Later straced it and it was looking for wallet.dat. The OS itself was fairly fresh (q3 ish?). Sorry i dont think i have any logs or anything that isnt deleted. As you may see from my history, i paniced fairly hard. " Well, it seems the maintainer panicked hard really quickly, assumed NoiseTorch was compromised, and deleted everything on his computer that could help knowing if it was actually the case...
- lionkor 4y agoPossibly the codebase and the binaries, apparently. The author seems not to know, either. If I was the author, I'd buy a CO detector. His comments are a bit off.
- mhio 4y agoThere is more detail in the related repo issue. My read was the devs computer was compromised but doesn't know if/what else was done. https://github.com/lawl/NoiseTorch/issues/254#issuecomment-1132470525 https://github.com/lawl/NoiseTorch/issues/254#issuecomment-1...
- RektBoy 4y agoAlso what is the reason behind packing open-source project with UPX ? https://github.com/lawl/NoiseTorch/issues/254#issuecomment-1130720172 https://github.com/lawl/NoiseTorch/issues/254#issuecomment-1... Also this is very good example, why everyone should use VM for browsing internet, or better yet - different machine. If you're popular enough, there alway be people who will use that $1mil RCE on you.
- easrng 4y agoSmaller binaries, I assume.