3 ms·
What's the attack vector in this case? The Wasm is loaded from the file itself. If they can compromise the file then its cheaper to just compromise the data dir
by discreteevent 1y ago
What's the attack vector in this case? The Wasm is loaded from the file itself. If they can compromise the file then its cheaper to just compromise the data directly.
- actionfromafar 1y agoProviding an optional, optimized, native decoder which is much faster, but does something wicked when it sees the right data.
- twoodfin 1y agoWhat I’m imagining is essentially a supply chain attack: The victim (mistakenly) trusts the attacker to supply an encoder. The encoder appears to function normally, but in fact will subtly leak information smuggled in decoded values of the victim’s data. Far-fetched, indeed.