4 ms·
Password-stealing Linux malware served for 3 years and no one noticed
- skilled 3y agodupe: https://news.ycombinator.com/item?id=37486946 https://news.ycombinator.com/item?id=37486946
- smko 3y agoYup, was posted earlier
- ralferoo 3y agoObviously someone noticed, or else there wouldn't be an article.
- adr1an 3y agoTitle says it took 3 years..
- bigDinosaur 3y agoIt's just a classic mathematician's answer: https://tvtropes.org/pmwiki/pmwiki.php/Main/MathematiciansAnswer https://tvtropes.org/pmwiki/pmwiki.php/Main/MathematiciansAn...
- neilv 3y agoBoth the Ars Technica and securelist.com articles say "Debian", with no mention of "Ubuntu". Given how much Ubuntu has ridden atop the shoulders of Debian, without much acknowledging it, it's a shame that "password-stealing Linux malware" is labeled as involving "Debian". Would be nice to have numbers on how much each distro ended up infected.
- hedora 3y agoThe ars article says “debian package”, which is a file format. It doesn’t mention any distributions.
- consoomer 3y agoIs anyone surprised a file called "free download manager" was malware? Anyone that lived through Kazaa isn't surprised :)
- GoblinSlayer 3y agoIt's a supply chain attack.