News for hackers. Stuff that matters.
Re:Dotfile madness by lgeorget on Saturday February 02, 2019 @12:51PM (#19064436)
There's an entire research field dedicated to the information flow control which could solve just that (if it were actually used).

In my research team, we used a tainting tracing mechanism to understand the behavior of malware. Basically, we installed a malware on a clean phone and we then traced all information flow originating from the APK to processes, to files, to sockets, etc. It helped reverse-engineering the malware.

Re:Dotfile madness by TeMPOraL on Saturday February 02, 2019 @05:16PM (#19066109)
I'd love something like this on program level. Given contents of a variable, I'd like to know where they came from - which pieces of code contributed to the result. I'd also love to be able to mark a piece of data, and see what code touched it or derived new data from it. A programming equivalent of injecting radioisotopes into the body.
Re:Dotfile madness by saagarjha on Saturday February 02, 2019 @06:02PM (#19066385)
I’d suggest looking into taint analysis tools, though those are usually aimed more at finding things like unsanitized input ending up in a call to system.
Re:Dotfile madness by 0db532a0 on Saturday February 02, 2019 @01:46PM (#19064820)
Any interesting links to papers?
Re:Dotfile madness by lgeorget on Sunday February 03, 2019 @05:02PM (#19072516)
Re:Dotfile madness by 0db532a0 on Monday February 04, 2019 @06:16AM (#19075413)
Thanks.