3 ms·

There are so many variations of Linux/FreeBSD and weird setups and environments that it's almost guaranteed that you'll hit a snag somewhere if you do any major

• bombcar 3y ago
  It's hard enough to get code to work correctly; getting it to be also doing something else is even harder. The way they went around it, however, was brilliant. Completely reduce the variables to directly target whatever it is you're attacking. Reminds me of stuxnet somewhat.
• SkiFire13 3y ago
  Note that in this case the backdoor was only inserted in some tarballs and enabled itself only when building deb/rpm packages for x86-64 linux and with gcc and the gnu linker. This should already filter out the most exotic setups and makes it harder to reproduce.
  • 1oooqooq 3y ago
    the point we got, when even exploits have to rely on user agent string sniffing. reminds me of the gnu hack discovered because one of the savannah build hosts was some odd architecture the exploit wasn't expecting