News for hackers. Stuff that matters.
Re:New Sci-Hub domain by Shank on Monday March 06, 2017 @10:32AM (#13803288)
Because how trivial would it be to modify a PDF maliciously and change data, forge results, etc.?

The same reason why we encrypt traffic using TLS, even if it's "mundane" traffic like tweets.

Re:New Sci-Hub domain by scw on Monday March 06, 2017 @11:22AM (#13803657)
That's a big ask for a site that's essentially 'morally justified' piracy.
Re:New Sci-Hub domain by pjc50 on Monday March 06, 2017 @12:03PM (#13804014)
If you want the guaranteed authentic version you should buy it from the original journal.
Re:New Sci-Hub domain by eli on Monday March 06, 2017 @12:51PM (#13804469)
How do you know the authentic sci-hub isn't doing that?
Re:New Sci-Hub domain by saycheese on Tuesday March 07, 2017 @09:31AM (#13810554)
You don't, though if they were, it's very unlikely they would be doing it in bulk for every file, since someone would notice at some point, either by inspecting the file or notice that a file when downloaded to a canary system misbehaves.

Targeted attacks might be possible based on the file contents or using a side-channel to ID the downloader; meaning only specific targeted users would get the malicious files.

Either way, being able to hold Sci-Hub accountable as this source would be important.

Re:New Sci-Hub domain by agumonkey on Monday March 06, 2017 @02:59PM (#13805547)
Especially since pdf can embed almost everything ...