News for hackers. Stuff that matters.

A comment on Exploiting Alpine Linux. Parent comment

Re:Exploiting Alpine Linux by tedunangst on Monday July 17, 2017 @02:42PM (#14791247)
It's not immediately clear, however, how one would conduct a cache timing attack against the package manager.
[ Parent | on HN ]
Re:Exploiting Alpine Linux by Sephr on Monday July 17, 2017 @04:44PM (#14792125)
Through bad antivirus code that inadvertently runs your code in a sandbox. There have been multiple vulnerabilities like this recently.
[ Parent | on HN ]
Re:Exploiting Alpine Linux by tedunangst on Monday July 17, 2017 @04:56PM (#14792194)
Sounds like we should design our package managers so that they don't run hostile code in a sandbox.
[ Parent | on HN ]