6 ms·
Those who caught it were indeed very clever. But the attacker did make mistakes, particularly the Valgrind issues and large performance regression. That ultimat
by grumpyprole 2y ago
Those who caught it were indeed very clever. But the attacker did make mistakes, particularly the Valgrind issues and large performance regression. That ultimately is what raised suspicions.
- glandium 2y agoThe large performance regression was a feature of the string obfuscation.
- grumpyprole 2y agoInteresting! So perhaps not really effective obfuscation after all!
- hiisukun 2y ago"Large" is doing quite a bit of work here: the engineer who found it had disabled turbo boost and was, by at least a little serendipity, quite performance focused at the time rather than being busy on other elements of their release target.
- account42 2y agoA 0.5s additional delay added to SSH is HUGE. No way this would not have been noticed sooner or later.
- INTPenis 2y agoThis is why I think it all came falling down due to the teknoraver patch to libsystemd to replace lzma with libarchive. Because anyone has the resources to test this locally and find the issues, but they just didn't have the time anymore.