3 ms·
When binary installers download additional components, they usually do so in a way indistinguishable server-side from downloading a file to analyze.
by josephcsible 2y ago
When binary installers download additional components, they usually do so in a way indistinguishable server-side from downloading a file to analyze.
- chowells 2y agoHonest ones, sure. Why would a malicious one leave behind evidence of its malicious behavior? The threat model is identical.
- josephcsible 2y agoBut that behavior would be noticeable in the original download, which would be evidence itself.