News for hackers. Stuff that matters.

A comment on Transmission BitTorrent Client OSX/Keydnap Malware Incident Q+A. Parent comment

Re:Transmission BitTorrent Client OSX/Keydnap Malware Incide... by heeen2 on Thursday September 01, 2016 @08:43AM (#12404798)
this pattern is just as dangerous (maybe less for github if you trust them) because you can detect curl and deliver malicious code: https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...
[ Parent | on HN ]
Re:Transmission BitTorrent Client OSX/Keydnap Malware Incide... by okket on Thursday September 01, 2016 @09:13AM (#12404953)
> this pattern is just as dangerous

As a general pattern, please do not do this. In this specific case I think most people trust the service (GitHub) and their DNS recursor + SSL library. Attacking these is not on the level of "random drive-by phishing", more like "targeted high value state sponsored".

To avoid this discussion I did not include the curl version in my original posting.

[ Parent | on HN ]