3 ms·
CRISPR is a tool that allows easy static binary patching
- egberts1 3y agoWow. The procedure to set this whole thing up entails the following packages: python3-pip revng/orchestra Both have questionable maintainer integrity issues similar to the famous libxz/liblzma backdoor[1] While the concept of lifting up to intermediate representation (IR) code is quite novel, this one is too hot for me to touch ... as an InfoSec guy. 1. https://news.ycombinator.com/item?id=39865810 https://news.ycombinator.com/item?id=39865810
- eurleif 3y ago`revng/orchestra` is from the same organization as the package itself, so it's odd to bring that dependency up; if there's a maintainer integrity issue with it, surely there's one with the package itself. And `python3-pip` is a bedrock of the Python ecosystem (it comes bundled with Python, as a matter of fact), so if there's an issue with it, that's a massive deal that affects any number of things. Meanwhile, you haven't described what these maintainer integrity issues are, nor how you learned of them. Frankly, your comment comes across as trollish, but maybe it isn't; would you like to explain what you're talking about?
- egberts1 3y agoWhen you study integrity of maintainers across multiple distro package managements (dnf, rpm, apt, zypper, yum, pip, flatpak, snap, homebrew), you will see that most have maintainer integrity issues. Orc (orchestra) too. Only one that nailed this is portage (BSD and Gentoo Linux).